1. You're Invited: Delivering malware via Google Calendar invites and PUAs blog | 2025-05-13 00:00 | aikido.dev | original ↗ | #supply-chain | #malware | #npm
2. Hide and Fail: Obfuscated Malware, Empty Payloads, and npm Shenanigans blog | 2025-04-03 00:00 | aikido.dev | original ↗ | #rce | #supply-chain | #malware
3. DOM Invader and the case of direct eval vs indirect eval blog | 2023-09-25 14:00 | portswigger.net | original ↗ | #portswigger-research | #dom-invader | #dom-xss