New Shai-Hulud attack trojanizes 19 science-focused PyPI packages

Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud ...
IEEE

Estimation of Snow Water Equivalence Using the Polarimetric Scanning Radiometer From the Cold Land Processes Experiments (CLPX03)

Abstract: In this letter, we investigated an inversion technique to estimate snow water equivalence (SWE) under Advanced Microwave Scanning Radiometer for Earth Observing System (AMSR-E) sensor ...
Hackaday

Using A Mirror To 3D Scan Both Sides Of An Object At Once

Photogrammetry is the process of 3D scanning an object by taking a lot of photographs, then using software to turn those into ...
The Hacker News

TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO

TrapDoor spread 34 malicious packages across npm, PyPI, and Crates.io, stealing developer credentials and enabling persistence.
GitHub

Vigolium - High-fidelity vulnerability scanner fusing agentic AI with native speed, modularity, and precision

Vigolium provides two complementary scanning modes: A cloud-based solution for teams that want the power of Vigolium without managing infrastructure. Console is the upgraded, fully-featured version of ...
GitHub

Secret Scanning Review Action

This Action adds more awareness, and optionally fails a pull request status check, when a secret scanning alert is introduced in commits, pull request title, description, comments, reviews, or review ...