Jekyll2026-09-22T10:34:45+00:00https://ramimac.me/feed.xmlHigh Signal SecurityCloud security research and engineering insights by Rami McCarthy.ramimacRust Supply Chain Attack on arrayref: Significant Overlap with DPRK Campaigns2026-08-20T19:00:00+00:002026-08-20T19:00:00+00:00https://ramimac.me/arrayref-dprkramimacInside the Metabase SQLi: Exploited in the Wild2026-08-10T19:00:00+00:002026-08-10T19:00:00+00:00https://ramimac.me/metabase-sqliramimackeyv and cacheable npm Package Hijacked in Supply Chain Attack2026-08-04T19:00:00+00:002026-08-04T19:00:00+00:00https://ramimac.me/keyv-cacheable-supply-chainramimacM-Red-Team: AsyncAPI Supply Chain Compromise via GitHub Actions2026-07-14T19:00:00+00:002026-07-14T19:00:00+00:00https://ramimac.me/asyncapi-supply-chainramimacMiasma: A Supply Chain Attack Targeting Red Hat npm Packages2026-06-01T19:00:00+00:002026-06-01T19:00:00+00:00https://ramimac.me/teampcp-miasmaramimacdurabletask: TeamPCP’s Latest PyPi Compromise2026-05-19T15:00:00+00:002026-05-19T15:00:00+00:00https://ramimac.me/teampcp-durabletaskramimacThe Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Wave2026-05-19T14:00:00+00:002026-05-19T14:00:00+00:00https://ramimac.me/teampcp-antvramimacFragnesia: Linux Kernel Local Privilege Escalation via ESP-in-TCP2026-05-13T14:00:00+00:002026-05-13T14:00:00+00:00https://ramimac.me/fragnesiaramimacMini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromised2026-05-12T14:00:00+00:002026-05-12T14:00:00+00:00https://ramimac.me/mini-shai-hulud-tanstackramimacDirty Frag: Linux Kernel Local Privilege Escalation via ESP and RxRPC2026-05-08T14:00:00+00:002026-05-08T14:00:00+00:00https://ramimac.me/dirty-fragramimac