DEV Community

Security

Hopefully not just an afterthought!

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Dependency Avalanche: 644 Strangers in Your package.json
vivian-voss profile

The Dependency Avalanche: 644 Strangers in Your package.json

#supplychain #opensource #freebsd #security
Comments
6 min read
We built 24 apps with AI. Three platforms. 561 vulnerabilities.
muhammad_hasan profile

We built 24 apps with AI. Three platforms. 561 vulnerabilities.

#ai #vibecoding #security #manus
1
Comments 2
7 min read
Why output-stage PII masking is the wrong protective surface for data exfiltration in RAG
hashevolution profile

Why output-stage PII masking is the wrong protective surface for data exfiltration in RAG

#rag #security #llm #ai
Comments 2
8 min read
React2Shell (CVE-2025-55182): Exploitation Flow and Secure Coding Lessons
lord-pendragon profile
Hamza for SecDim

React2Shell (CVE-2025-55182): Exploitation Flow and Secure Coding Lessons

#webdev #programming #javascript #security
1
Comments
1 min read
PreviewDrop's Privacy Policy Is Live — What It Means for Teams Who Care About Data
cristian_iridon_286794874 profile

PreviewDrop's Privacy Policy Is Live — What It Means for Teams Who Care About Data

#webdev #security #privacy #saas
Comments
2 min read
Building a DDoS Bouncer: Anomaly Detection with Python & Z-Score
blessing_bill_abe78b8b2fc profile

Building a DDoS Bouncer: Anomaly Detection with Python & Z-Score

#algorithms #cybersecurity #python #security
4
Comments 1
2 min read
I built an open-source dependency intelligence platform in TypeScript — here's how it works
zaydmulani09 profile

I built an open-source dependency intelligence platform in TypeScript — here's how it works

#typescript #opensource #security #webdev
Comments
3 min read
GHSA-H829-5CG7-6HFF: GHSA-H829-5CG7-6HFF: Improper Tag Signature Verification in Gitverify
cverports profile

GHSA-H829-5CG7-6HFF: GHSA-H829-5CG7-6HFF: Improper Tag Signature Verification in Gitverify

#security #cve #cybersecurity #ghsa
Comments
2 min read
572K Weekly Downloads, One Preinstall Script: The SAP CAP Supply Chain Attack Your AI Agent Would Have Missed
toniantunovic profile

572K Weekly Downloads, One Preinstall Script: The SAP CAP Supply Chain Attack Your AI Agent Would Have Missed

#security #npm #supplychain #devops
1
Comments
3 min read
What Is Agent Reliability Testing?
athelper profile

What Is Agent Reliability Testing?

#agents #ai #security #testing
Comments
9 min read
I Inherited a NestJS Codebase. One 12-Second ESLint Run Found 47 Violations Across 6 Vulnerability Classes.
ofri-peretz profile

I Inherited a NestJS Codebase. One 12-Second ESLint Run Found 47 Violations Across 6 Vulnerability Classes.

#security #nestjs #eslint #devsecops
1
Comments 2
18 min read
Continuous monitoring caught a credential leak in a published MCP package. Six republishes later, it is still there.
michael_onyekwere profile

Continuous monitoring caught a credential leak in a published MCP package. Six republishes later, it is still there.

#security #supplychain #mcp #npm
Comments
7 min read
Security news weekly round-up - 8th May 2026
ziizium profile

Security news weekly round-up - 8th May 2026

#security
1
Comments 1
3 min read
🛡️ Lirix v1.4.1: The Ecosystem Domination Release
lokii_ding profile

🛡️ Lirix v1.4.1: The Ecosystem Domination Release

#showdev #ai #security #web3
1
Comments
6 min read
ByteCode C2 is now open source. A C2 framework that actually bypasses Defender
wadecalvin9 profile

ByteCode C2 is now open source. A C2 framework that actually bypasses Defender

#news #cybersecurity #security #opensource
Comments
1 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.