Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Mon, 03 Apr 2023 15:32:19 GMT
———————————————
✏️Title: Are open-source NPM packages always secure to use?
———————————————
📎Link: https://medium.com/p/215e9d3902be
———————————————
Tags: #npm #nodejs #dependency_management #security

Medium

Are open-source NPM packages always secure to use?

Node.js has a rich ecosystem of open-source packages available through the npm registry. These packages provide developers with pre-built…

8 views16:01

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Mon, 17 Apr 2023 15:02:15 GMT
———————————————
✏️Title: Flawed choices: Developers continue to use vulnerable open-source dependencies
———————————————
📎Link: https://medium.com/p/b12092fb9abd
———————————————
Tags: #application_security #cybersecurity #dependency_management #open_source #software_development

Medium

Flawed choices: Developers continue to use vulnerable open-source dependencies

While the open-source ecosystem continues to make progress on securing the production of widely used components, devs still need more.

5 views16:00

Daily Writeups

🔖New Writeup❗️
———————————————
🗓Date: Wed, 27 Sep 2023 10:35:21 GMT
———————————————
✏️Title: Find Vulnerable Dependencies using OWASP Dependency Check
———————————————
📎Link: https://medium.com/p/f3c130af6078
———————————————
Tags: #java #owasp #vulnerability #maven_plugin #dependency_check

Medium

Find Vulnerable Dependencies using OWASP Dependency Check

OWASP Dependency Check is a useful tool for checking vulnerabilities in your project and generating a comprehensive report.

19 views02:02

Daily Writeups

⤷ Title: AWS Lambda Layers Simplified: A Beginner’s Guide
════════════════════════
𐀪 Author: Thushara Samaraweera
════════════════════════
ⴵ Time: Thu, 26 Dec 2024 06:37:35 GMT
════════════════════════
⌗ Tags: #aws_lambda_layer #aws_lambda #reusable #dependency_management

Medium

AWS Lambda Layers Simplified: A Beginner’s Guide

Step-by-step instructions to get started with Lambda layers and enhance your serverless apps

11 views08:35

Daily Writeups

⤷ Title: Dependency Confusion: A Threat Actor in the Modern Software Ecosystem
════════════════════════
𐀪 Author: Batuhan Sancak
════════════════════════
ⴵ Time: Thu, 10 Apr 2025 05:28:51 GMT
════════════════════════
⌗ Tags: #dependency_injection #cybersecurity #appsec #software_development #security

Medium

Dependency Confusion: A Threat Actor in the Modern Software Ecosystem

Table of Contents

32 views06:04

Daily Writeups

⤷ Title: Malicious NPM Packages Target PayPal Users to Steal Sensitive Data
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Mon, 14 Apr 2025 00:16:26 +0000
════════════════════════
⌗ Tags: #Malware #cybersecurity #Data Theft #dependency confusion #FortiGuard Labs #Information stealing #javascript #Malicious packages #npm #NPM packages #Package manager #paypal #Software security #supply chain attack

Daily CyberSecurity

Malicious NPM Packages Target PayPal Users to Steal Sensitive Data

FortiGuard Labs discovers malicious NPM packages targeting PayPal users. Attackers use deceptive tactics to steal usernames, paths, and hostnames

23 views16:06

Daily Writeups

⤷ Title: How I Discovered a Live Dependency Confusion Vulnerability in a GraphQL-Based Web Application
════════════════════════
𐀪 Author: Sanaullah Aman Korai
════════════════════════
ⴵ Time: Sat, 05 Jul 2025 17:38:20 GMT
════════════════════════
⌗ Tags: #ethical_hacking #dependency_confusion #supply_chain_security #bug_bounty #cybersecurity

Medium

How I Discovered a Live Dependency Confusion Vulnerability in a GraphQL-Based Web Application

In this write-up, I will walk you through how I discovered a live Dependency Confusion vulnerability using GraphQL introspection and…

33 views19:04

Daily Writeups

⤷ Title: The Hidden Threat in Your Code: How Malicious PyPI and npm Packages Are Weaponizing Developer Trust…
════════════════════════
𐀪 Author: Ismail Tasdelen
════════════════════════
ⴵ Time: Mon, 18 Aug 2025 15:46:03 GMT
════════════════════════
⌗ Tags: #dependency_injection #code #application_security #cybersecurity #supply_chain_security

Medium

The Hidden Threat in Your Code: How Malicious PyPI and npm Packages Are Weaponizing Developer Trust 🎯

When your favorite programming libraries become digital Trojan horses

11 views16:04

Daily Writeups

⤷ Title: Ketorolac Injection Market Growth in 2025–2034: Dynamics, Opportunities, and Strategies
════════════════════════
𐀪 Author: Prajval Jadhav
════════════════════════
ⴵ Time: Wed, 03 Sep 2025 05:45:58 GMT
════════════════════════
⌗ Tags: #dependency_injection #ketorolac #ketorolac_injection #injection #sql_injection

Medium

Ketorolac Injection Market Growth in 2025–2034: Dynamics, Opportunities, and Strategies

“Global Ketorolac Injection Market Share and Ranking, Overall Sales and Demand Forecast 2025–2034” is the most recent report published by Exactitude Consultancy, a leading global market research…

55 views06:05

Daily Writeups

⤷ Title: Turning Dependency Confusion Research into a Profitable Stack
════════════════════════
𐀪 Author: Abdelrhman Allam (sl4x0)
════════════════════════
ⴵ Time: Wed, 08 Oct 2025 15:23:43 GMT
════════════════════════
⌗ Tags: #infosec #dependency_confusion #cybersecurity #bug_bounty #supply_chain

Medium

Turning Dependency Confusion Research into a Profitable Stack

“The easiest way to get started is to find some promising research by someone else, build on it by mixing in other techniques, then apply…

19 views16:04

Daily Writeups

⤷ Title: Hunting Dependency Confusion: Supply Chain Vulnerabilities for Bug Bounties
════════════════════════
𐀪 Author: Aman Bhuiyan
════════════════════════
ⴵ Time: Sat, 11 Oct 2025 19:11:46 GMT
════════════════════════
⌗ Tags: #bug_hunting #dependency_injection #hacking #bug_bounty

Medium

Hunting Dependency Confusion: Supply Chain Vulnerabilities for Bug Bounties

Hey there, fellow bug bounty hunters and security enthusiasts! If you’ve been knee-deep in web app pentesting, you’ve probably chased XSS…

28 views20:03

Daily Writeups

⤷ Title: So, “Shift-Left” Failed. What Comes Next?
════════════════════════
𐀪 Author: Ali Naqvi
════════════════════════
ⴵ Time: Wed, 07 Jan 2026 15:40:44 GMT
════════════════════════
⌗ Tags: #dependency_management #application_security #devtools #software_development #shiftleft

Medium

So, “Shift-Left” Failed. What Comes Next?

Remember the days when Security and Development were two different teams who met annually at the company holiday party? Siloed, with…

25 views16:04

Daily Writeups

⤷ Title: Finding Remote Code Execution in Google: A Bug Hunter’s Story
════════════════════════
𐀪 Author: zabit majeed
════════════════════════
ⴵ Time: Sun, 11 Jan 2026 17:49:36 GMT
════════════════════════
⌗ Tags: #cve #google #bug_bounty #dependency_injection #hacking

Medium

Finding Remote Code Execution in Google: A Bug Hunter’s Story

Hey everyone, this is Zabit Majeed . I’m an ethical hacker and a part-time bug bounty hunter, and this story is about persistence more…

39 views20:03

Daily Writeups

⤷ Title: How I Discovered a Dependency Confusion Vulnerability in a Ruby Application Leading to RCE
════════════════════════
𐀪 Author: Ahmed Tarek
════════════════════════
ⴵ Time: Sat, 17 Jan 2026 19:06:39 GMT
════════════════════════
⌗ Tags: #pentesting #bug_bounty #dependency_confusion #bug_bounty_tips #ruby

Medium

How I Discovered a Dependency Confusion Vulnerability in a Ruby Application Leading to RCE

hey there,

22 views20:03

Daily Writeups

⤷ Title: # How I Found a Snyk-Verified 9.3
════════════════════════
𐀪 Author: freebold
════════════════════════
ⴵ Time: Sat, 14 Mar 2026 12:48:36 GMT
════════════════════════
⌗ Tags: #supply_chain #cybersecurity #npm #dependency_confusion #bug_bounty

Medium

# How I Found a Snyk-Verified 9.3

# How I Found a Snyk-Verified 9.3 Critical Vulnerability in FDJ United's Gaming Platform — And Got Paid Nothing **By freebold | Security Researcher** --- ## TL;DR I discovered a critical dependency …

23 views13:03

Daily Writeups

⤷ Title: Supply Chain Shield: How DepConfuse Proactively Stops Dependency Confusion Attacks
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 16 Mar 2026 09:24:16 +0000
════════════════════════
⌗ Tags: #Open Source Tool #cybersecurity tools #CycloneDX #DepConfuse #Dependency Confusion #DevSecOps #open source security #PURL #SBOM #Software Composition Analysis #Supply Chain Security

Penetration Testing Tools

Supply Chain Shield: How DepConfuse Proactively Stops Dependency Confusion Attacks

Stop dependency confusion before it starts. DepConfuse is an SBOM-first tool that scans 20+ registries to secure your software supply chain from package takeover.

16 views11:04

About

Blog

Apps

Platform