Daily Writeups
@Daily_Writeups
3.57K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.57K subscribers
Daily Writeups
⤷ Title: Dependency Confusion: A Threat Actor in the Modern Software Ecosystem
════════════════════════
𐀪 Author: Batuhan Sancak
════════════════════════
ⴵ Time: Thu, 10 Apr 2025 05:28:51 GMT
════════════════════════
⌗ Tags: #dependency_injection #cybersecurity #appsec #software_development #security
Medium
Dependency Confusion: A Threat Actor in the Modern Software Ecosystem
Table of Contents
32 views
Daily Writeups
⤷ Title: Malicious NPM Packages Target PayPal Users to Steal Sensitive Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:16:26 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Data Theft #dependency confusion #FortiGuard Labs #Information stealing #javascript #Malicious packages #npm #NPM packages #Package manager #paypal #Software security #supply chain attack
Daily CyberSecurity
Malicious NPM Packages Target PayPal Users to Steal Sensitive Data
FortiGuard Labs discovers malicious NPM packages targeting PayPal users. Attackers use deceptive tactics to steal usernames, paths, and hostnames
23 views
Daily Writeups
⤷ Title: How I Discovered a Live Dependency Confusion Vulnerability in a GraphQL-Based Web Application
════════════════════════
𐀪 Author: Sanaullah Aman Korai
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 17:38:20 GMT
════════════════════════
⌗ Tags: #ethical_hacking #dependency_confusion #supply_chain_security #bug_bounty #cybersecurity
Medium
How I Discovered a Live Dependency Confusion Vulnerability in a GraphQL-Based Web Application
In this write-up, I will walk you through how I discovered a live Dependency Confusion vulnerability using GraphQL introspection and…
33 views
Daily Writeups
⤷ Title: The Hidden Threat in Your Code: How Malicious PyPI and npm Packages Are Weaponizing Developer Trust…
════════════════════════
𐀪 Author: Ismail Tasdelen
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 15:46:03 GMT
════════════════════════
⌗ Tags: #dependency_injection #code #application_security #cybersecurity #supply_chain_security
Medium
The Hidden Threat in Your Code: How Malicious PyPI and npm Packages Are Weaponizing Developer Trust 🎯
When your favorite programming libraries become digital Trojan horses
11 views
Daily Writeups
⤷ Title: Ketorolac Injection Market Growth in 2025–2034: Dynamics, Opportunities, and Strategies
════════════════════════
𐀪 Author: Prajval Jadhav
════════════════════════
ⴵ Time: Wed, 03 Sep 2025 05:45:58 GMT
════════════════════════
⌗ Tags: #dependency_injection #ketorolac #ketorolac_injection #injection #sql_injection
Medium
Ketorolac Injection Market Growth in 2025–2034: Dynamics, Opportunities, and Strategies
“Global Ketorolac Injection Market Share and Ranking, Overall Sales and Demand Forecast 2025–2034” is the most recent report published by Exactitude Consultancy, a leading global market research…
55 views
Daily Writeups
⤷ Title: Turning Dependency Confusion Research into a Profitable Stack
════════════════════════
𐀪 Author: Abdelrhman Allam (sl4x0)
════════════════════════
ⴵ Time: Wed, 08 Oct 2025 15:23:43 GMT
════════════════════════
⌗ Tags: #infosec #dependency_confusion #cybersecurity #bug_bounty #supply_chain
Medium
Turning Dependency Confusion Research into a Profitable Stack
“The easiest way to get started is to find some promising research by someone else, build on it by mixing in other techniques, then apply…
19 views
Daily Writeups
⤷ Title: Hunting Dependency Confusion: Supply Chain Vulnerabilities for Bug Bounties
════════════════════════
𐀪 Author: Aman Bhuiyan
════════════════════════
ⴵ Time: Sat, 11 Oct 2025 19:11:46 GMT
════════════════════════
⌗ Tags: #bug_hunting #dependency_injection #hacking #bug_bounty
Medium
Hunting Dependency Confusion: Supply Chain Vulnerabilities for Bug Bounties
Hey there, fellow bug bounty hunters and security enthusiasts! If you’ve been knee-deep in web app pentesting, you’ve probably chased XSS…
28 views
Daily Writeups
⤷ Title: So, “Shift-Left” Failed. What Comes Next?
════════════════════════
𐀪 Author: Ali Naqvi
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 15:40:44 GMT
════════════════════════
⌗ Tags: #dependency_management #application_security #devtools #software_development #shiftleft
Medium
So, “Shift-Left” Failed. What Comes Next?
Remember the days when Security and Development were two different teams who met annually at the company holiday party? Siloed, with…
25 views
Daily Writeups
⤷ Title: Finding Remote Code Execution in Google: A Bug Hunter’s Story
════════════════════════
𐀪 Author: zabit majeed
════════════════════════
ⴵ Time: Sun, 11 Jan 2026 17:49:36 GMT
════════════════════════
⌗ Tags: #cve #google #bug_bounty #dependency_injection #hacking
Medium
Finding Remote Code Execution in Google: A Bug Hunter’s Story
Hey everyone, this is Zabit Majeed . I’m an ethical hacker and a part-time bug bounty hunter, and this story is about persistence more…
39 views
Daily Writeups
⤷ Title: How I Discovered a Dependency Confusion Vulnerability in a Ruby Application Leading to RCE
════════════════════════
𐀪 Author: Ahmed Tarek
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 19:06:39 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #dependency_confusion #bug_bounty_tips #ruby
Medium
How I Discovered a Dependency Confusion Vulnerability in a Ruby Application Leading to RCE
hey there,
22 views
Daily Writeups
⤷ Title: # How I Found a Snyk-Verified 9.3
════════════════════════
𐀪 Author: freebold
════════════════════════
ⴵ Time: Sat, 14 Mar 2026 12:48:36 GMT
════════════════════════
⌗ Tags: #supply_chain #cybersecurity #npm #dependency_confusion #bug_bounty
Medium
# How I Found a Snyk-Verified 9.3
# How I Found a Snyk-Verified 9.3 Critical Vulnerability in FDJ United's Gaming Platform — And Got Paid Nothing **By freebold | Security Researcher** --- ## TL;DR I discovered a critical dependency …
23 views
Daily Writeups
⤷ Title: Supply Chain Shield: How DepConfuse Proactively Stops Dependency Confusion Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 09:24:16 +0000
════════════════════════
⌗ Tags: #Open Source Tool #cybersecurity tools #CycloneDX #DepConfuse #Dependency Confusion #DevSecOps #open source security #PURL #SBOM #Software Composition Analysis #Supply Chain Security
Penetration Testing Tools
Supply Chain Shield: How DepConfuse Proactively Stops Dependency Confusion Attacks
Stop dependency confusion before it starts. DepConfuse is an SBOM-first tool that scans 20+ registries to secure your software supply chain from package takeover.
16 views
Daily Writeups
⤷ Title: Engineers Don’t Care About Compliance. And Spoiler Alert: They Shouldn’t Need To.
════════════════════════
𐀪 Author: Ali Naqvi
════════════════════════
ⴵ Time: Wed, 18 Mar 2026 20:03:01 GMT
════════════════════════
⌗ Tags: #open_source #compliance #dependency_management #application_security #engineering
Medium
Engineers Don’t Care About Compliance. And Spoiler Alert: They Shouldn’t Need To.
Let me start with a statement that makes some compliance teams uncomfortable:
28 views
Daily Writeups
⤷ Title: Poisoning the Pipeline: How the “Frank” Campaign Targeted Apple and Google via NPM Dependency Confusion
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Tue, 12 May 2026 07:57:45 +0000
════════════════════════
⌗ Tags: #Malware #Alibaba #Apple #CI/CD Security #Cyber Security #Dependency Confusion #DevSecOps #google #JavaScript #Malware 2026 #npm #Panther Threat Research #supply chain attack
Penetration Testing Tools
Poisoning the Pipeline: How the "Frank" Campaign Targeted Apple and Google via NPM Dependency Confusion
Cybersecurity specialists have exposed a pervasive malicious campaign targeting developers, wherein the adversary bypassed the compromise of finished
29 views
Daily Writeups
⤷ Title: Massive npm Dependency Confusion Attack Infiltrates Corporate Ecosystems
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 30 May 2026 01:44:11 +0000
════════════════════════
⌗ Tags: #Malware #Code Security #dependency confusion #DevSecOps #JavaScript dropper #Microsoft Threat Intelligence #npm registry #supply chain attack
Daily CyberSecurity
Massive npm Dependency Confusion Attack Infiltrates Corporate Ecosystems
Microsoft uncovers a massive npm dependency confusion attack targeting enterprise infrastructure. Learn how these malicious packages discovered run code.
20 views
Daily Writeups
⤷ Title: irect and Transitive Dependencies: Why Every Version Must Be Analyzed
════════════════════════
𐀪 Author: Juliano Pereira de Souza
════════════════════════
ⴵ Time: Tue, 28 Jul 2026 17:37:47 GMT
════════════════════════
⌗ Tags: #owasp #application_security #cybersecurity #software_security #dependency_management
Medium
irect and Transitive Dependencies: Why Every Version Must Be Analyzed
Finding a vulnerable package is only the beginning of the investigation
6 views