🇺🇦 Please help support Ukraine and all people affected by Russia's aggressive and unprovoked invasion of Ukraine. Spread awareness, and, if you can, donate.

Blog

29 April 2021
Bundler is Still Vulnerable to Dependency Confusion Attacks (CVE⁠-⁠2020⁠-⁠36327)
20 April 2021
Virtual Namespacing: A Robust Approach to Avoiding Dependency Confusion Attacks
20 October 2020
How I Found An alg=none JWT Vulnerability in the NHS Contact Tracing App