Notes on security research, bug hunting, vulnerabilities and Rust by Khaled Nassar (MindPatch).https://www.mindpatch.net/en-ushttps://www.mindpatch.net/blog/npm-worm-hiding-behind-web-archive/https://www.mindpatch.net/blog/npm-worm-hiding-behind-web-archive/A typosquatted @angular/core clone chains a postinstall hook through the Internet Archive to a CHAOS RAT, then worms across SSH, the AUR and npm. The full chain, the host artifacts to alert on, and two YARA rules.Wed, 07 Oct 2026 00:00:00 GMTnpmSupply ChainMalwareLinuxDetectionYARAhttps://www.mindpatch.net/blog/docker-escape-breaking-out-of-containers/https://www.mindpatch.net/blog/docker-escape-breaking-out-of-containers/A practical guide to Docker container escape techniques, covering misconfigurations, privileged containers, capability abuse, and kernel exploits. Understanding these attacks is essential for building secure containerized infrastructure.Sat, 17 Jan 2026 00:00:00 GMTDockerContainer SecurityPrivilege EscalationLinuxResearch