Snyk security researcher deploys malicious NPM packages targeting Cursor.com

Re:Snyk security researcher deploys malicious NPM packages t... by kstrauser on Monday January 13, 2025 @11:55PM (#42693816)

And what does that have to do with Snyk, other than that some of their employees use to work for IDF?

I'm a US Navy veteran. Would you also stay away from my employers because they have veterans on staff?

Seriously, I get what you're trying to say, but I don't understand the broader point you're trying to make. So Snyk has some ex-IDF employees. Find a high-profile infosec firm that doesn't. They military service they were compelled to has a reputation at being really, really good at infosec. I see no reason why companies shouldn't want to hire them afterward.

[ Parent | on HN ]

Re:Snyk security researcher deploys malicious NPM packages t... by defrost on Tuesday January 14, 2025 @12:08AM (#42693909)

Without wanting to take a position here, the GP comment had a specific narrow point.

The claim was that Snyk was founded by Unit 8200 members.

Not that it had a few Israeli veterens, almost all Israeli's serve in the IDF after all.

https://en.wikipedia.org/wiki/Unit_8200

To be fair I have a former Unit 8200 member in my larger extended family who left and has since been vocal in opposition to Netanyahu so membership in an elite Cyber Unit alone doesn't define a person.

That aside, most Governments would keep an eye on a company started by, say, former NSA employees and watch for covert activity under any overt actions.

[ Parent | on HN ]

Re:Snyk security researcher deploys malicious NPM packages t... by dekelpilli on Tuesday January 14, 2025 @07:05AM (#42696261)

It would correlate strongly that 8200 alumni end up being educated and working in tech, and likely living in Tel Aviv. This is a group of people who, by and large, are not big fans of the current government.

[ Parent | on HN ]