p80n

AppSec, OffSec, Security Researcher

[p80n @p80n_sec]

RT @EndorLabs: @7nohe/openapi-react-query-codegen (460k DL/week) trojanned on 2026-08-28. Credential stealer + worm propagating across npm,…

[Endor Labs @EndorLabs]

@p80n_sec audited 7 AI orchestration platforms and found 14 xritical + high severity vulns, including multiple unauthenticated prompt injection → RCE chains.

Full research from DEFCON 34:
https://t.co/QOsONt0pEg

[Endor Labs @EndorLabs]

116 @mastra npm packages trojanized in 27 minutes via a hijacked account. Tens of millions of downloads at risk. The malware isn't in Mastra — it's in easy-day-js, a typosquat added as a dependency. Dropper disables TLS, fetches remote payload, self-deletes. Full IOCs + remediation:
https://t.co/55ZRewpz8z

[Endor Labs @EndorLabs]

We are investigating a potential supply chain incident in the #mastra ecosystem. It appears that a malicious actor compromised the org and added a malicious typosquat package as a dependency throughout numerous additional packages. Detailed analysis will follow.

[p80n @p80n_sec]

ai-sdk-ollama versions 3.8.5, 2.2.1, 1.1.1, and 0.13.1 have clear evidence of malicious credential stealers with the potential of worming in this latest supply chain compromise

Here's the full analysis and I'll make updates as they come https://t.co/Tlnm0Frv0Y

[Endor Labs @EndorLabs]

🚨 We've flagged npm/[email protected] as potentially malicious. It uses an obfuscated 4.5MB payload and multiple major and minor versions were backfilled with the malicious payload within minutes.

More details to follow as we investigate.

[Burp Suite @Burp_Suite]

We've shortlisted the top ten submitted BChecks (so far), and now we'd like you to vote for your favourite.

Each BCheck will be shared as an individual reply to this tweet - simply hit the "Like" button for the BCheck you like the most.

Read more here: https://t.co/0AEFzXcl1N

[Burp Suite @Burp_Suite]

CVE-2023-25690 Apache mod_proxy CRLF Smuggling
https://t.co/YY8LODOlvv

[p80n @p80n_sec]

@BSidesRDU @EverSecCTF Thanks for the opportunity! Great to see everyone and learn!

[p80n @p80n_sec]

@EverSecCTF @HackPackCTF @securisec @cackalackycon Had a lot of fun; found some areas to improve and sharpen down!