Daily Writeups
@Daily_Writeups
3.53K subscribers
2 photos
130K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.53K subscribers
Daily Writeups
⤷ Title: How to Migrate Your Vite + React + TypeScript Project from npm to Yarn (The Clean Way)
════════════════════════
𐀪 Author: AIAlchemist_Ab1r
════════════════════════
ⴵ Time: Fri, 12 Sep 2025 08:39:14 GMT
════════════════════════
⌗ Tags: #seo #software_development #package_management #webdev #hacking
Medium
🚀 How to Migrate Your Vite + React + TypeScript Project from npm to Yarn (The Clean Way)
Slow builds, inconsistent dependencies, and unpredictable CI/CD pipelines can cost enterprise dev teams hours — or even days — per month…
30 views
Daily Writeups
⤷ Title: Typosquatting in Package Managers: The Attack That Preys on a Single Keystroke
════════════════════════
𐀪 Author: InstaTunnel
════════════════════════
ⴵ Time: Sun, 21 Sep 2025 07:55:34 GMT
════════════════════════
⌗ Tags: #malicious_package #typosquatting #package_manager #cybersecurity #supply_chain_attack
Medium
Typosquatting in Package Managers: The Attack That Preys on a Single Keystroke
23 views
Daily Writeups
⤷ Title: 373 Malicious Packages a Day: Why Software Supply Chain Compromise Is Inevitable
════════════════════════
𐀪 Author: Peter Hanneman
════════════════════════
ⴵ Time: Tue, 21 Oct 2025 23:39:55 GMT
════════════════════════
⌗ Tags: #software_development #cyber_security_awareness #package_manager #web_development #cybersecurity
Medium
373 Malicious Packages a Day: Why Software Supply Chain Compromise Is Inevitable
Antivirus, firewalls and paranoia aren’t enough to protect you from software supply chain attacks.
7 views
Daily Writeups
⤷ Title: Alpine Linux 3.23 Released: Adopts 6.18 LTS Kernel & Unveils APK 3.0 Package Manager
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 04:31:10 +0000
════════════════════════
⌗ Tags: #Linux #Alpine Linux #APK 3.0.0 #Containers #Linux 3.23 #Linux 6.18 #LTS Kernel #Minimalist OS #musl libc #Package Manager
Penetration Testing Tools
Alpine Linux 3.23 Released: Adopts 6.18 LTS Kernel & Unveils APK 3.0 Package Manager
The latest cycle of updates within the Linux distribution ecosystem closes the year with a notable milestone: Alpine
10 views
Daily Writeups
⤷ Title: The Trojan Coding Assistant: How a Compromised Token Pushed a Shadow Release of Cline
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 23 Feb 2026 03:15:17 +0000
════════════════════════
⌗ Tags: #Malware #Cline CLI #GitHub Actions #npm security #OIDC #OpenClaw #package.json #software provenance #supply chain attack #Tech News 2026 #web shells
Penetration Testing Tools
The Trojan Coding Assistant: How a Compromised Token Pushed a Shadow Release of Cline
An incident has transpired within the npm registry involving the Cline CLI utility; for a duration of several
4 views
Daily Writeups
⤷ Title: Hackers Impersonate Stripe.net to Hijack the Global Payment Supply Chain
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Feb 2026 04:25:06 +0000
════════════════════════
⌗ Tags: #Cybercriminals #.NET Security #Financial Cybercrime #infosec #malware #NuGet #Package Impersonation #ReversingLabs #Stripe.net #supply chain attack #Typosquatting
Daily CyberSecurity
Hackers Impersonate Stripe.net to Hijack the Global Payment Supply Chain
ReversingLabs uncovers a malicious NuGet package mimicking Stripe.net. Discover how attackers are targeting the financial sector via supply chain poisoning.
34 views
Daily Writeups
⤷ Title: Root Access at Risk: Critical Nix Sandbox Escape Overwrites Sensitive System Files
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 10 Apr 2026 13:03:02 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2026_39860 #infosec #Linux Security #Nix #NixOS #Package Management #privilege escalation #root access #Sandbox Escape
Daily CyberSecurity
Root Access at Risk: Critical Nix Sandbox Escape Overwrites Sensitive System Files
Nix patches a critical 9.0 CVSS sandbox escape. Learn how CVE-2026-39860 allows unprivileged users to seize root control via symlink manipulation. Update now!
42 views
Daily Writeups
⤷ Title: RubyGems Under Siege: New Account Registrations Suspended After Massive Malware Incursion
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 13 May 2026 09:00:18 +0000
════════════════════════
⌗ Tags: #Cybercriminals #Cyber Security News #Infosec #Maciej Mensfeld #Malware 2026 #Mend.io #open source security #Package Manager Security #Ruby on Rails #RubyGems #supply chain attack #TeamPCP
Penetration Testing Tools
RubyGems Under Siege: New Account Registrations Suspended After Massive Malware Incursion
RubyGems has temporarily suspended the registration of new accounts following a pervasive assault on the Ruby ecosystem. According
27 views
Daily Writeups
⤷ Title: Malicious JS Lifecycle Hooks Found Hiding Inside PHP Composer Packages
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 23 May 2026 04:32:47 +0000
════════════════════════
⌗ Tags: #Malware #CI/CD Poisoning #Cross_Ecosystem Malice #Cyber Security #devdojo/wave #GitHub Actions Backdoor #infosec #package.json Exploit #PHP Composer #Postinstall Script #Socket Security #Starter Kits #supply chain attack
Daily CyberSecurity
Malicious JS Lifecycle Hooks Found Hiding Inside PHP Composer Packages
Socket exposes a clever cross-ecosystem supply chain attack targeting PHP packages by hiding a malicious JS postinstall backdoor inside package.json.
12 views
Daily Writeups
⤷ Title: Google Wallet Package Tracking Turns Your Gmail Receipts Into Delivery Cards
════════════════════════
𐀪 Author: Do Son
════════════════════════
ⴵ Time: Mon, 29 Jun 2026 03:50:11 +0000
════════════════════════
⌗ Tags: #Technology #android #Apple Wallet #Digital Wallet #gmail #Google Wallet #Package Tracking
Daily CyberSecurity
Google Wallet Package Tracking Turns Your Gmail Receipts Into Delivery Cards
Google has just rolled out a genuinely useful addition to Google Wallet: package tracking. Thanks to deep Gmail integration, the app can now read your online shopping receipts and tracking codes a…
7 views