Top all-time · #2439
SafeDep
Company blog · safedep.iosecurityprogramming
SafeDep is the company blog at safedep.io, writing about security and programming. Since 2023, 31 different Hacker News readers have linked it 69 times, most often “DirtyBlanket: Fake Express Packages on NPM Spread a Linux Worm”. It is still writing: the last post was on 2026-11-01, and you can follow it by feed.
Too few sampled comments (9) to say how often HN recommends it.?
Why HN links it
HN readers link SafeDep's posts on open source supply chain attacks, such as malicious npm packages, the axios and Keyv compromises, and malware analysis of packages.
Summarised by Claude from a sample of 9 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
SafeDep helps teams detect malicious packages, protect AI agents, and govern open source risk across developer machines, CI/CD pipelines, and production workflows.
Most-linked posts?
- DirtyBlanket: Fake Express Packages on NPM Spread a Linux Worm4 people · 4 mentions · first linked 2026-09-29
- NPM's keyv package got compromised having 127M weekly downloads3 people · 3 mentions · first linked 2026-08-04
- Mass NPM Supply Chain Attack Hits TanStack, Mistral AI, and 170 Packages3 people · 3 mentions · first linked 2026-05-12
- ESLint-Config-Prettier Compromised3 people · 3 mentions · first linked 2025-07-21
- Megalodon: Mass GitHub Repo Backdooring via CI Workflows3 people · 3 mentions · first linked 2026-05-21
- Config Files That Run Code: Supply Chain Security Blindspot2 people · 2 mentions · first linked 2026-06-08
- Malicious Litellm 1.82.8: Credential Theft and Persistent Backdoor2 people · 2 mentions · first linked 2026-03-24
- Miasma Worm Targets AI Coding Agents via GitHub Repos2 people · 2 mentions · first linked 2026-06-05
- Red Hat Cloud Services Publish Pipeline Compromised, Shipped Malicious NPM2 people · 2 mentions · first linked 2026-06-01
- Compromised telnyx on PyPI2 people · 2 mentions · first linked 2026-03-27
What Hacker News says?
Documenting technical details and payload analysis here: https://safedep.io/shai-hulud-second-coming-supply-chain-att... Like previous variant, it has credential harvesting, self-replication and GitHub public repository based exfiltration. Double base64 encoded credentials being exposed using GitHub repositories: https://github.com/search?q=%22Sha1-Hulud%3A%20The%20Second%...
Comment linking /shai-hulud-second-coming-supply-chain-attack/
on “Shai-Hulud Returns: Over 300 NPM Packages Infected”Submitted Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor as a story · 596 points
HN discussionI don't know how people can still be friends with NPM. Just last week: DirtyBlanket: Fake Express Packages on npm Spread a Linux Worm https://safedep.io/dirtyblanket-express-impersonation-npm/ Will stick to deno and JSR for my JS needs, thanks. I like secure friends.
Comment linking /dirtyblanket-express-impersonation-npm/
on “Friendship ended with Deno, now Node is my best friend”Submitted Why does mathmain need an encrypted loader? as a story · 138 points
HN discussionWe have done the complete analysis and there are 32 packages share the same publishing pipeline. https://safedep.io/redhat-cloud-services-hit-by-mini-shai-hu...
Comment linking /redhat-cloud-services-hit-by-mini-shai-hulud-npm-worm/
on “NPM packages from RedHat have been compromised”Submitted Malicious Rust Crate Arrayref Runs a Build-Time Payload as a story · 43 points
HN discussionI think, they have an malware detection engine of their own, so not only they help protect from known vulnerabilityes / malwares but also have thier own database their blog: https://safedep.io/dynamic-analysis-oss-package-at-scale/
Comment linking /dynamic-analysis-oss-package-at-scale/
on “Show HN: Tips to stay safe from NPM supply chain attacks”Submitted Dynamic Malware Analysis of Open Source Packages at Scale as a story · 8 points
HN discussionFor GitHub Actions, i found http://safedep.io/ to be helpful, not only it guard against known attacks, but also it has its own malware detection engine.
Comment linking /
on “Show HN: Tips to stay safe from NPM supply chain attacks”Submitted Axios 1.14.1 and 0.30.4 Compromised via Stolen Maintainer Account on NPM as a story · 7 points
HN discussionWe just analysed the payload. Technical details here: https://safedep.io/malicious-litellm-1-82-8-analysis/ We are looking at similar attack vectors (pth injection), signatures etc. in other PyPI packages that we know of.
Comment linking /malicious-litellm-1-82-8-analysis/
on “LiteLLM Python package compromised by supply-chain attack”Submitted ESLint-Config-Prettier Compromised as a story · 7 points
HN discussionThis article has a lot of information and ways to check & clean: https://safedep.io/keyv-npm-supply-chain-compromise/
Comment linking /keyv-npm-supply-chain-compromise/
on “Keyv and friends compromised in active Shai-Hulud supply chain attack”Submitted Megalodon: Mass GitHub Repo Backdooring via CI Workflows as a story · 6 points
HN discussionI got the news via https://safedep.io/keyv-npm-supply-chain-compromise/
Comment linking /keyv-npm-supply-chain-compromise/
on “Keyv and friends compromised in active Shai-Hulud supply chain attack”Submitted Mini Shai-Hulud Strikes Again: 314 npm Packages Compromised as a story · 5 points
HN discussionMany of the malicious commits show as an author `github-actions <github-actions@github.com>`. Which means that they are authenticating as internal github CI/CD stuff and that there are so many of those that no possible automated tool can find the poison in the mountain of chaff. So this is related to the Sept 2025 security breach of Github. > The five repos carry 1,459 GitHub stars between them, mantine-datatable al…
Comment linking /config-files-that-run-code/
on “Microsoft's open source tools were hacked to steal passwords of AI developers”Submitted Curious Case of Embedded Executable in a Newly Introduced Transitive Dependency as a story · 4 points
HN discussionhttps://safedep.io/miasma-worm-ai-coding-agent-config-inject... seems to describe the same symptoms, for what it's worth.
Comment linking /miasma-worm-ai-coding-agent-config-injection/
on “Supply chain attack alert: .github/setup.js”Submitted DirtyBlanket: Fake Express Packages on NPM Spread a Linux Worm as a story · 3 points
HN discussionThis article[0] investigated the payload. It's a RAT, so it's capable of executing whatever shell commands it receives, instead of just stealing credentials. [0]: https://safedep.io/axios-npm-supply-chain-compromise/
Comment linking /axios-npm-supply-chain-compromise/
on “Post Mortem: axios NPM supply chain compromise”Submitted Config Files That Run Code: Supply Chain Security Blindspot as a story · 3 points
HN discussionWe built a GitLab CI/CD Component to integrate vet, our OSS tool with GitLab. This supports dependency scanning for vulnerable and malicious packages in all versions of GitLab. Demo and documentation published in this blog post: https://safedep.io/introducing-gitlab-ci-component
Comment linking /introducing-gitlab-ci-component
on a deleted threadSubmitted Miasma Worm Targets AI Coding Agents via GitHub Repos as a story · 3 points
HN discussionSubmitted Megalodon: Mass GitHub Repo Backdooring via CI Workflows as a story · 3 points
HN discussionSubmitted Malicious NPM Package Impersonating Popular Express Cookie Parser as a story · 3 points
HN discussionSubmitted Supply chain security for open source maintainers as a story · 2 points
HN discussionSubmitted Tensorlake is compromised using mini Shai Hulud as a story · 2 points
HN discussionSubmitted DirtyBlanket: Fake Express Packages on NPM Spread a Linux Worm as a story · 2 points
HN discussionSubmitted DirtyBlanket: Fake Express Packages on NPM Spread a Linux Worm as a story · 2 points
HN discussion
