📦 Software Supply Chain - hop1.ng.1357

sinewaveai/agent-security-scanner-mcp: Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.

Less-relevant results

For the 2nd time in weeks, Microsoft packages laced with credential stealer

🕵️AI Agents News

arstechnica.com··Lobsters, Hacker News

GitHub disables Microsoft repos pushing password-stealing malware

💻Software Engineering News

bleepingcomputer.com··Hacker News

NPM-Scan v1.1.0: Four New Detectors for June 2026 Supply Chain Attacks

🪝eBPF Code

github.com··Hacker News

When LLMs Invent Rust Crates: An Empirical Study of Hallucination Patterns and Mitigation

🤖LLM Academic

arxiv.org·

A cross-platform system tray app and CLI for Kubernetes port forwarding

🌍Distributed Systems

kftray.app··Hacker News

Blog - We have to change the rules of security

🔓Hacking Blog

opensourcesecurity.io··Lobsters, Hacker News

cra-norm-engine/crane: CRA compliance management tool — Conformity by design

🔓Hacking Code

github.com··Hacker News

Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels

🔧Agent Tooling Blog

socket.dev··Hacker News

Introducing GitLab Orbit

🔌Claude Plugins Blog

about.gitlab.com··Hacker News

Two vendors run 91% of the secure email gateway market for US public companies

🕵️Threat Intelligence Blog

ciphercue.com··Hacker News

A Proposal for an Open Credential Lifecycle Standard

🔓Open Source Software

gist.github.com··Hacker News

shcherbak-ai/licenseal: Fast cross-ecosystem dependency license compatibility checker + Claude Code review skill

🔓Open Source Software Code

github.com··Hacker News

Azure Linux 4.0 is Microsoft’s first general-purpose Linux

🐧Linux

boxofcables.dev··Hacker News

Container Speed. VM-Level Security

🔓Hacking

edera.dev··Hacker News

Show HN: Sencho – a self hosted Docker Compose UI with multi-node fleet support

🐳Docker Code

github.com··Hacker News

simke9445/agentlocks: Advisory file locks so multiple AI coding agents can share one Git worktree.

💻Terminal Tools Code

github.com··Hacker News

No more posts from hop1.ng.1357's subscribed feeds.

Scour all 25255 feeds Learn more about Feeds

sinewaveai/agent-security-scanner-mcp: Security scanner MCP server for AI coding agents. Prompt injection firewall, package hallucination detection (4.3M+ packages), 1000+ vulnerability rules with AST & taint analysis, auto-fix.

Meet Hades: The malware that lies to AI security agents

someone actually leaked the Miasma supply chain attack toolkit source code on github

For the 2nd time in weeks, Microsoft packages laced with credential stealer

GitHub disables Microsoft repos pushing password-stealing malware

NPM-Scan v1.1.0: Four New Detectors for June 2026 Supply Chain Attacks

When LLMs Invent Rust Crates: An Empirical Study of Hallucination Patterns and Mitigation

A cross-platform system tray app and CLI for Kubernetes port forwarding

Blog - We have to change the rules of security

cra-norm-engine/crane: CRA compliance management tool — Conformity by design

Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels

Introducing GitLab Orbit

Two vendors run 91% of the secure email gateway market for US public companies

A Proposal for an Open Credential Lifecycle Standard

shcherbak-ai/licenseal: Fast cross-ecosystem dependency license compatibility checker + Claude Code review skill

Azure Linux 4.0 is Microsoft’s first general-purpose Linux

Container Speed. VM-Level Security

Show HN: Sencho – a self hosted Docker Compose UI with multi-node fleet support

simke9445/agentlocks: Advisory file locks so multiple AI coding agents can share one Git worktree.