🧰 Vault

The items that name it 13

• Bringing post-quantum cryptography to geographically fenced key management
  articleas tools2026-10-23

  Underlies the provisioning service for storing regional root keys, managed by Cloudflare on-premises

• Loud, Fast, and Everywhere: Anatomy of a Real AI-Driven Cloud Attack
  writeupas classification.technologies2026-10-19
• SubQuery Ecosystem Compromise: Hidden Credential Theft and Backdoors
  writeupas classification.technologies2026-10-05
• subScraper
  repoas affected products2026-08-27
• The OpenSourceMalware Show #16
  talkas classification.technologies2026-08-08
• NPM Malware Compromises keyv and cacheable with 500M+ Weekly Downloads and Spreads to Hundreds of Packages | Blog | Endor Labs
  advisoryas classification.technologies2026-08-04
• Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks
  writeupas classification.technologies2026-08-04
• Why EDR and proxy won’t save you from supply chain malware
  articleas affected products2026-06-02

  Credentials harvested by durabletask second-stage payload

• Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm
  writeupas classification.technologies2026-06-01
• IDP Zero-Dollar
  repoas tools2026-05-13

  Secrets management; source of truth for secrets, HA Raft-backed, Kubernetes auth backend for workload identity

• Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack
  writeupas classification.technologies2026-05-11
• Mini Shai-Hulud Worm (Apr–May 2026)
  articleas classification.technologies2026-05-06
• openrig — multi-agent Claude Code/Codex orchestration
  repoas classification.technologies