Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Security Flaws in VS Extensions Expose Developers to Threats
════════════════════════
𐀪 Author: Valentin Podkamennyi
════════════════════════
ⴵ Time: Sat, 18 Oct 2025 23:05:02 GMT
════════════════════════
⌗ Tags: #visual_studio_code #supply_chain_attack #software_security #developer_security #cybersecurity
Medium
Security Flaws in VS Extensions Expose Developers to Threats
Developers publishing Visual Studio extensions to open marketplaces have inadvertently exposed sensitive access tokens.
14 views
Daily Writeups
⤷ Title: Sophisticated NPM Attack: Cross-Platform Infostealer Targets Developer Systems
════════════════════════
𐀪 Author: Technijian
════════════════════════
ⴵ Time: Thu, 30 Oct 2025 13:36:48 GMT
════════════════════════
⌗ Tags: #npmattack #malware_alert #developer_security #cybersecurity #supply_chain_security
Medium
Sophisticated NPM Attack: Cross-Platform Infostealer Targets Developer Systems
In 2025, developers face a new and alarming cybersecurity challenge. A highly advanced NPM-based malware campaign has surfaced, designed to…
23 views
Daily Writeups
⤷ Title: API Security 101: How Modern Systems Get Hacked
════════════════════════
𐀪 Author: Ukwedje Taiwo Goodness
════════════════════════
ⴵ Time: Fri, 05 Dec 2025 07:14:16 GMT
════════════════════════
⌗ Tags: #cybersecurity #owasp_api_security_top_10 #cybersecurity_awareness #api_security #developer_security
Medium
API Security 101: How Modern Systems Get Hacked
As we all know, APIs run the modern world. Every mobile app, fintech dashboard, school portal, travel platform, and e-commerce tool relies…
35 views
Daily Writeups
⤷ Title: Developer Alert: Fake VS Code Extension Deploys OctoRAT via Multi-Stage Anivia Loader
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 04:08:51 +0000
════════════════════════
⌗ Tags: #Malware #Anivia Loader #Credential Theft #Developer Security #OctoRAT #Prettier_vscode_plus #supply chain attack #VS Code
Penetration Testing Tools
Developer Alert: Fake VS Code Extension Deploys OctoRAT via Multi-Stage Anivia Loader
At the end of November, a team of bug hunters uncovered an infection chain that began with a
9 views
Daily Writeups
⤷ Title: CVE-2026-22718: EOL Spring CLI Tool for VS Code Found Vulnerable to Command Injection
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 13 Jan 2026 23:48:23 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #Command Injection #CVE_2026_22718 #developer security #end_of_life #EOL #Spring CLI #VS Code Extension #vulnerability management #Yue Liu
Daily CyberSecurity
CVE-2026-22718: EOL Spring CLI Tool for VS Code Found Vulnerable to Command Injection
Urgent: Uninstall the EOL Spring CLI VS Code extension now. CVE-2026-22718 (CVSS 6.6) allows command injection and will not be patched.
26 views
Daily Writeups
⤷ Title: The Developer’s Trap: EmEditor Supply Chain Attack Drains Credentials
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Wed, 28 Jan 2026 07:57:05 +0000
════════════════════════
⌗ Tags: #Malware #Developer Security #EmEditor #Emurasoft #Google Drive Caching #InfoSec 2026 #Infostealer #PowerShell #supply chain attack #Trend Micro #Watering Hole
Penetration Testing Tools
The Developer’s Trap: EmEditor Supply Chain Attack Drains Credentials
In late December 2025, the architects of the renowned text editor EmEditor issued a formal advisory regarding the
10 views
Daily Writeups
⤷ Title: Shattering the Trust: The “GlassWorm” Supply Chain Attack Hijacking Open VSX Extensions
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Thu, 05 Feb 2026 03:53:08 +0000
════════════════════════
⌗ Tags: #Malware #Credential Theft #Developer Security #GlassWorm #Infostealer #macOS Malware #oorzc #Open VSX #Socket Security #Solana blockchain #supply chain attack #VS Code extensions
Penetration Testing Tools
Shattering the Trust: The "GlassWorm" Supply Chain Attack Hijacking Open VSX Extensions
A sophisticated supply chain incursion has been documented within the Open VSX extension registry, precipitated by the illicit
14 views
Daily Writeups
⤷ Title: CVE-2025-65717: Critical Vulnerability in VS Code’s Live Server Extension Puts 72 Million Developers at Risk, No Patch
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 02:52:13 +0000
════════════════════════
⌗ Tags: #Vulnerability Report #CVE_2025_65717 #Cyber Security #developer security #IDE Vulnerability #infosec #Live Server #Localhost Exfiltration #OX Security #VS Code Security
Daily CyberSecurity
CVE-2025-65717: Critical Vulnerability in VS Code's Live Server Extension Puts 72 Million Developers at Risk, No Patch
Critical VS Code Live Server flaw CVE-2025-65717 (CVSS 9.1) lets attackers steal source code and credentials via malicious links. Protect your workspace now.
34 views
Daily Writeups
⤷ Title: The Invisible Switch: North Korean Hackers Use “Contagious Interviews” to Trojanize Your MetaMask
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Fri, 20 Feb 2026 04:59:27 +0000
════════════════════════
⌗ Tags: #Malware #BeaverTail #Chrome Security #Contagious Interview #Crypto Theft #Developer Security #InvisibleFerret #malware #MetaMask #North Korea #OtterCookie #Secure Preferences #Tech News 2026
Penetration Testing Tools
The Invisible Switch: North Korean Hackers Use "Contagious Interviews" to Trojanize Your MetaMask
North Korean cyber-adversaries are endeavoring to surreptitiously supplant the MetaMask cryptocurrency wallet extension directly upon a victim’s workstation—an
25 views
Daily Writeups
⤷ Title: The Interview Trap: Malicious Next.js Repositories Weaponize Coding Tests to Hack Developers
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Fri, 27 Feb 2026 00:01:54 +0000
════════════════════════
⌗ Tags: #Cybercriminals #developer security #infosec #malware #Microsoft Defender #Next.js #npm Security #social engineering #supply chain attack #Technical Interview Scam #VS Code Security
Daily CyberSecurity
The Interview Trap: Malicious Next.js Repositories Weaponize Coding Tests to Hack Developers
Microsoft warns of a new campaign targeting engineers via fake Next.js technical assessments. Malware hides in VS Code tasks and npm scripts to steal secrets.
24 views