Top all-time · #8402
Stacklok
Company blog · stacklok.com/blogsecurityai
Stacklok is the company blog at stacklok.com, writing about security and ai. Since 2023, 9 different Hacker News readers have linked it 11 times, most often “How npm install scripts can be weaponized: a real-world example”. It is still writing: the last post was on 2026-10-27, and you can follow it by feed.
Stacklok gives enterprises an open, Kubernetes-native architecture to run AI agents securely with no vendor lock-in. Led by the co-creators of Kubernetes.
Most-linked posts?
- How npm install scripts can be weaponized: a real-world example4 people · 4 mentions · first linked 2024-03-04
What Hacker News says?
https://www.stacklok.com/careers A startup focused on software supply chain security, founded by the co-founder of kubernetes and myself (founder of sigstore) We are also look for a staff data scientist and a senior / staff SRE, but don't have the roles up just yet. You can reach me on luke@stacklok.com , but no recruiters (you will end up in the blocked folder).
Comment linking /careers
on “Ask HN: Who is hiring? (August 2023)”Submitted Proof-of-Diligence: Model trust and maintainability in open source as a story · 8 points
HN discussionStacklok | Fully Remote | Multiple Open Roles We are an innovative startup founded by the creators of Kubernetes, Sigstore and the folks who bootstrapped foundations such as the CNCF and OpenSSF. Our mission is to revolutionize the software industry by providing a secure and trustworthy software supply chain. With our deep expertise in open-source technologies and commitment to enhancing software security, we are se…
Comment linking /careers
on “Ask HN: Who is hiring? (September 2023)”Submitted How npm install scripts can be weaponized: a real-world example as a story · 6 points
HN discussionhttps://stacklok.com/careers stacklok is a series A round startup in the supply chain security space, co-founded by the founders of kubernetes and sigstore. Currently seeking mostly engineering roles. front end (react) and backend (go / gprc). This is full time remote, but only hiring from EMEA to the East Coast of the US.
Comment linking /careers
on “Ask HN: Who is hiring? (June 2023)”Submitted NPM install scripts can be weaponized as a story · 3 points
HN discussionSeems to be a better guide here (without the risk curl): https://www.stacklok.com/post/exploring-llama-2-on-a-apple-m...
Comment linking /post/exploring-llama-2-on-a-apple-mac-m1-m2
on “A comprehensive guide to running Llama 2 locally”Submitted Securing Infrastructure as Code: Step One, Setting Up IaC as a story · 2 points
HN discussionSubmitted Risk factors of open source software beyond CVEs as a story · 1 points
HN discussionSubmitted NPM install scripts can be weaponized as a story · 1 points
HN discussionSubmitted How npm install scripts can be weaponized: A real-world example as a story · 1 points
HN discussion