danieldspx's comments

On: Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

[danieldspx]

Just notice guys it did not started with tinycolor. I had first reported it here, I am just not as popular haha

My posts way before the issue was created: https://news.ycombinator.com/item?id=45252940 https://www.linkedin.com/posts/daniel-pereira-b17a27160_i-ne...

On: Active NPM supply chain attack: Tinycolor and 40 Packages Compromised

[danieldspx]

I if you think that last week attack was s1ngularity that can be related to wormhole, now we get this shai-hulud that is actually a worm. Funny right? They are similar attacks also. This funny coincidence was described by someone at Aikido Security.

[ramimac → danieldspx]

It's not a coincidence - this attack is directly downstream of s1ngularity

On: GitHub Attack – branches sending secrets to webhook

[danieldspx]

I redacted the names to avoid spreading and teaching people how to get other people's secrets. I am in contact with Github and will update here once they solve the issue.

[danieldspx → danieldspx]

Redacted names are shai-hulud, everybody knows by now haha