1
Malware that runs the moment you open the project
打开项目瞬间中招？揭秘利用编辑器漏洞的恶意代码手法
"A dropper family committed straight into developer repos. It executes on next dev or when VS Code opens the folder — no npm install needed. How it hi…
2
Show HN: Encode arbitrary data into a WOFF2 color font, decode via canvas
把任意数据塞进WOFF2彩色字体，再用Canvas解码，这波操作太骚了！
Article URL: https://github.com/EtherDream/brpack Comments URL: https://news.ycombinator.com/item?id=48718029 Points: 2 # Comments: 0