Archive: [ 2026 ]
  1. 0x6

    opencode or pwnedcode?

    A proof of concept showing how repository-local opencode plugins can execute code at startup without user interaction.

    opencodevulnerability-researchrce
    CMD Research
  2. 0x5

    Why you shouldn't try to install cracked software by copying and pasting into the terminal

    Analysis of MacSync Stealer's ClickFix delivery, credential theft, data exfiltration, and trojanization of Ledger and Trezor apps.

    macosmalwarethreat-research
    Ismael Esquilichi and Pablo Redondo
  3. 0x4

    JS Sandbox Fundamentals: How VM2 Builds a JavaScript Sandbox

    A walkthrough of vm2's V8 context isolation, bidirectional Proxy membrane, AST instrumentation, and execution flow.

    javascriptsandboxingvm2
    CMD Research
  4. 0x3

    JS Sandbox Fundamentals: Prototypes, Realms, and Why Sandboxing Is Hard

    Why prototype chains, cross-realm objects, exceptions, and membranes make JavaScript sandboxing difficult.

    javascriptsandboxing
    CMD Research
  5. 0x2

    JS Sandbox Fundamentals: Understanding Proxy Objects

    A technical introduction to JavaScript Proxy objects, traps, membranes, invariants, revocation, and their role in sandbox design.

    javascriptsandboxing
    CMD Research
  6. 0x1

    Catching Mac OS stealers in the wild

    Analysis of a macOS ClickFix stealer campaign, including credential theft, persistence, exfiltration, and indicators of compromise.

    macosmalwarethreat-research
    Pablo Redondo Castro
End of index 6 posts / newest first