Post

Ben McCann
@benmccann.com

I wonder why none of the literally HUNDREDS of individuals with access to publish the Zapier SDK noticed their organization was committing engineering malpractice by giving that many people access to the keys of the kingdom. And that's how you catch SHA1-Hulud... www.npmjs.com/package/@zap...

aikido.devShai Hulud 2.0 Strikes Again: Malware Supply-Chain Attack Hits Zapier & ENS DomainsThe threat actor behind “Shai Hulud 2.0” launched a new malware campaign compromising the supply chain of Zapier, ENS Domains and more — exposing secrets, injecting malicious code, and enabling widesp...

0 reposts9 likes

Ben McCann
@benmccann.com

Get in touch with James if you want to help support open source tools to identify problems like this! bsky.app/profile/4308...

James@43081j.com

i have a growing @e18e.dev roadmap of very useful tools we could all benefit from to make it happen, we need two things: sponsors, and leads/champions 👀 if you're interested in either, come chat to me and i'd be happy to show you through the roadmap we have!