Always on AI Security Engineer. Backed by @ycombinator and @solofounders
San Francisco, CA
Joined June 2025
- Tweets82
- Following2
- Followers911
- Likes287
‼️ Node.js has a Remote Code Execution vulnerability.
CVE-2026-111497 is a high-severity bug in its Brotli decoder. Decompressing attacker-controlled data can leak memory or lead to remote code execution.
You don’t need to use Brotli directly. Your app could hit this through fetch() or libraries like body-parser.
OpenHack supply chain tracks this, patch now!
OpenHack retweeted
⚠️ Node.js is vulnerable to remote code execution.
CVE-2026-111497 (high): A Node.js process that decompresses attacker-controlled Brotli data can be made to leak memory or run arbitrary code.
You’re exposed if your app or a library decompresses bad Brotli data (e.g. the built-in fetch(), body-parser)
Aikido detects this. Patches are available.
🚨 LiteLLM 1.107.0 was compromised today and shipped with a credential stealer and remote-code loader.
The malicious files were present in the distributed wheels but absent from the corresponding Git tag.
Full breakdown:
openhack.com/blog/litellm-1-…
‼️ Patches for the PHP Vulnerability are out ‼️
Go ahead and patch your servers ASAP.
Full article:
openhack.com/blog/php2shell-…
🚨 PHP is going to be dropping emergency security updates tomorrow (October 21st, 14:00 UTC).
- CVE-2026-109618 & CVE-2026-109619 are unauthenticated RCE vulnerabilities both with a score of CVSS 9.2
- The RCE appears to work on default installations of many services & frameworks such as WordPress, Magento, Laravel and more
- PHP versions >5.4.0 affected
- Discovered by team @calif_io
OpenHack retweeted
Great chatting with @arinwaichulis from @9to5mac on the Security Bite podcast about the new era of bug hunting, how companies like Apple are handling AI-generated security slop, and how @OpenHack helps separate real vulnerabilities from the noise!
9to5mac.com/2026/10/01/secur…
We’re thrilled to announce that OpenHack is now a part of @ycombinator Fall 2026! 🙌
Excited for some amazing product announcements very soon.
Excited to share that @OpenHack is now part of YC Fall 2026! 🚀
Feels pretty surreal to be writing this, after building, shipping, selling and figuring things out the hard way.
Despite all advancements in security tooling, organizations still struggle with false positives, knowing what to fix first, and AI-assisted attacks moving faster than ever.
That’s why we’re building an always-on AI security engineer. One that is the most context aware - knowing your business, developer intent and system architecture deeply. It can hunt, reason, prioritize and verify vulnerabilities based on true business impact like a real security engineer.
It’s a much harder problem to solve than it looks on the surface, and we’re just getting started.
Back to building. 🫡
Yesterday, OpenHack found 37 npm packages engaging in typosquatting to distribute infostealer malware, in 26 seconds.
All 37 packages are now gone from npm, but the GitHub-hosted payload remains downloadable.
Full breakdown:
openhack.com/blog/37-package…
🚨BREAKING: OpenHack has detected an infostealer malware campaign on npm capitalizing on typosquatting.
At this time, the package downloads a malicious exe file on windows as soon as one of the following packages is installed. The infostealer is downloaded from:
hxxps://github.com/bebraz1/qPzM50V1AKG0rVlH/releases/tag/null
The following packages trigger this malicious malware and should be taken down ASAP:
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
[email protected]
This is exactly why we built OpenHack. Model restrictions slow down our ability to find and defend against vulnerabilities; gating them behind cyber use-case forms.
First month of OpenHack Pro is free btw, code "DEFCON34".
