TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...
TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...
In the time Hackaday has been in existence we must have brought you plenty of projects housed in Altoids tins, as well as a ...
Originally envisioned as a simple DIY laptop project, [kati]’s PinkPad V1 ended up being considerably more involved than ...