lateos-ai
NPM-Scan v1.4.1: Detecting IronWorm, Miasma Escalated, and Dependency Confusion
NPM-Scan: Detecting Six Major NPM Supply Chain Campaigns (June 2026)
Re:Lateos/NPM-scan v1.2.0: Detecting Native Addon Malware (node-gyp Ab...
on Friday June 05, 2026 @04:14PM (#48417578)
# Install globally
npm install -g @lateos/npm-scan
Lateos/NPM-scan v1.2.0: Detecting Native Addon Malware (node-gyp Abuse)
NPM-Scan v1.1.0: Four New Detectors for June 2026 Supply Chain Attacks
Re:NPM-Scan v1.1.0: Four New Detectors for June 2026 Supply Chain Attacks
on Thursday June 04, 2026 @11:03PM (#48407444)
Detection validation on three real-world campaigns from June 2026:
- @redhat-cloud-services Miasma (32 packages)
- TanStack Mini Shai-Hulud (84 versions)
- Axios Backdoor (transitive injection)
Detectors: Self-propagation, encrypted C2, transitive deps, maintainer compromise.
NPM-Scan: Detecting Supply Chain Attacks (100% Validation on Real Campaigns)
Show HN: Lateos/NPM-scan – open-source NPM supply chain scanner, v0.18.3
Show HN: MigraDiff – migra fork with AI migration generation for Postgres
NPM-Scan:Detecting Dependency Confusion, Typosquatting,and Credential Harvesting
Show HN: MigraDiff v1.3.0 – PostgreSQL schema diff with AI migration explanation
Show HN: MigraDiff – maintained fork of migra (PostgreSQL schema diff)
Re:Ask HN: What are you working on (non-AI)?
on Wednesday May 13, 2026 @02:18PM (#48125470)
I am working on npm supply-chain security. My tool is called @lateos/npm-scanner You can install it via npm -I @lateos/npm-scanner . The npm readme page is at https://www.npmjs.com/package/@lateos/npm-scan and open spruce is at https://github.com/lateos-ai/npm-scan . I appreciate all input and feedback