Daily Writeups
@Daily_Writeups
4.02K subscribers
4 photos
136K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
4.02K subscribers
Daily Writeups
⤷ Title: VSCode Extension Errors in Cursor: Understanding Microsoft’s Restrictions
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 16 Apr 2025 02:46:47 +0000
════════════════════════
⌗ Tags: #Technology #C/C++ #Code Editors #Cursor #Development #Errors #Extensions #Licensing #Microsoft #remote ssh #VSCode
Daily CyberSecurity
VSCode Extension Errors in Cursor: Understanding Microsoft's Restrictions
VSCode extension errors in Cursor? Learn why Microsoft's licensing restricts C/C++ & Remote SSH in non-Microsoft editors. Discover open-source alternatives
30 views
Daily Writeups
⤷ Title: When Both Marketplaces Fall: The Cross-Platform Extension Malware Campaign
════════════════════════
𐀪 Author: Amit Assaraf
════════════════════════
ⴵ Time: Wed, 02 Jul 2025 15:02:58 GMT
════════════════════════
⌗ Tags: #cybersecurity #hacking #malware #vscode_extension #vscode
Medium
When Both Marketplaces Fall: The Cross-Platform Extension Malware Campaign
One threat actor. Two major marketplaces. Nearly 3 million installs. The numbers may have been faked — but the backdoors they dropped were…
20 views
Daily Writeups
⤷ Title: They Hacked Devs Through VS Code
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Sat, 12 Jul 2025 23:58:43 GMT
════════════════════════
⌗ Tags: #vscode #information_security #malware #cybersecurity #ai
Medium
They Hacked Devs Through VS Code
Inside the Stealth Supply Chain Attack That Nearly Compromised Thousands
21 views
Daily Writeups
⤷ Title: I Accidentally Downloaded a Malicious Extension in Cursor and Lost My Crypto
════════════════════════
𐀪 Author: Code Coup
════════════════════════
ⴵ Time: Fri, 15 Aug 2025 03:50:24 GMT
════════════════════════
⌗ Tags: #ai #cryptocurrency #hacking #vscode #cursor
Medium
I Accidentally Downloaded a Malicious Extension in Cursor and Lost My Crypto
This isn’t just my sob story, it’s a warning for anyone using VS Code and Cursor.
22 views
Daily Writeups
⤷ Title: Vibe Coding: Part 2 — The Debugging Disco
════════════════════════
𐀪 Author: Muhammad Talha Khan
════════════════════════
ⴵ Time: Thu, 11 Sep 2025 13:06:06 GMT
════════════════════════
⌗ Tags: #vibe_coding #pakistan #coding #bug_bounty #vscode
Medium
🎶 Vibe Coding: Part 2 — The Debugging Disco 🎶
Last time in Vibe Coding, our hero — the midnight programmer — found their groove, coding with lo-fi beats, coffee energy, and vibes…
27 views
Daily Writeups
⤷ Title: [Sneak Peek] ZAST EXPRESS is Almost Here!
════════════════════════
𐀪 Author: ZAST AI
════════════════════════
ⴵ Time: Mon, 15 Sep 2025 15:13:42 GMT
════════════════════════
⌗ Tags: #cursor #vscode #devtools #cybersecurity
Medium
[Sneak Peek] ZAST EXPRESS is Almost Here!
ZAST EXPRESS plugin brings our zero false positive AI directly to your IDE:
28 views
Daily Writeups
⤷ Title: GuardDog: The Open-Source CLI Tool for Hunting Malicious Packages in npm, PyPI, and More
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 29 Sep 2025 04:13:07 +0000
════════════════════════
⌗ Tags: #Open Source Tool #CLI Tool #cybersecurity #GitHub Actions #Go #GuardDog #npm #PyPI #Supply Chain #VSCode Extensions
Penetration Testing Tools
GuardDog: The Open-Source CLI Tool for Hunting Malicious Packages in npm, PyPI, and More
GuardDog is a CLI tool that uses heuristics and Semgrep rules to scan for malicious npm, PyPI, Go, and VSCode packages, helping to secure the software supply chain.
39 views
Daily Writeups
⤷ Title: Hacked by Code We Trust: A Single Flaw Saved Your Data, analyzing the Amazon Injection Attack
════════════════════════
𐀪 Author: Harsh duhan
════════════════════════
ⴵ Time: Wed, 08 Oct 2025 14:10:09 GMT
════════════════════════
⌗ Tags: #hacking #amazon_q #ai_agent #vscode #amazon
Medium
Hacked by Code We Trust: A Single Flaw Saved Your Data, analyzing the Amazon Injection Attack
A Close Call: How a Malicious Pull Request Nearly Unleashed a Wiper Attack via Amazon Q Developer
11 views
Daily Writeups
⤷ Title: Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks
════════════════════════
𐀪 Author: Cyber-AppSec
════════════════════════
ⴵ Time: Wed, 15 Oct 2025 23:27:39 GMT
════════════════════════
⌗ Tags: #information_security #ai #vscode #malware #cybersecurity
Medium
Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain Risks
Visual Studio Code (VS Code) has become the beating heart of modern software development — fast, flexible, and open. But new research from…
10 views
Daily Writeups
⤷ Title: Critical VSCode Supply Chain Flaw: 550+ Secrets Leaked Via Extensions, Exposing 100K+ Users to Malware
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Thu, 16 Oct 2025 03:49:08 +0000
════════════════════════
⌗ Tags: #Data Leak #AI API Keys #Dotfiles #Open VSX #PAT Leak #Secrets Management #supply chain attack #VSCode
Daily CyberSecurity
Critical VSCode Supply Chain Flaw: 550+ Secrets Leaked Via Extensions, Exposing 100K+ Users to Malware
Wiz found 550+ secrets (PATs, API keys) leaked in 500+ VSCode extensions, enabling an attacker to push malicious updates to 100K+ developers. Dotfiles were the main culprit.
14 views