Jekyll2026-08-12T16:48:54+00:00https://aydinnyunus.github.io/feed.xmlYunus Aydın BlogSupply-chain security, CVE deep-dives, and open-source vulnerability research. npm malware analysis, browser extension reversing, GitHub Archive secret scanning, and responsible disclosure write-ups.Yunus AydınWorklo: Sahte Startup, Gerçek Malware2026-08-06T00:00:00+00:002026-08-06T00:00:00+00:00https://aydinnyunus.github.io/2026/08/06/worklo-fake-job-npm-supply-chain-malware-trYunus AydınWorklo: Fake Startup, Real Malware in the Take-Home Assignment2026-08-06T00:00:00+00:002026-08-06T00:00:00+00:00https://aydinnyunus.github.io/2026/08/06/worklo-fake-job-npm-supply-chain-malwareYunus AydınModHeader: Browsing Geçmişini Sızdıran Chrome Eklentisi Analizi2026-07-12T00:00:00+00:002026-07-12T00:00:00+00:00https://aydinnyunus.github.io/2026/07/12/modheader-data-exfiltration-stanfordstudies-trYunus AydınModHeader: Covert Data Exfiltration to api.stanfordstudies.com2026-07-12T00:00:00+00:002026-07-12T00:00:00+00:00https://aydinnyunus.github.io/2026/07/12/modheader-data-exfiltration-stanfordstudiesYunus AydınGitHub Archive’da AI ile 3.800+ Sızdırılmış Secret Nasıl Buldum2026-06-30T00:00:00+00:002026-06-30T00:00:00+00:00https://aydinnyunus.github.io/2026/06/30/hunting-leaked-secrets-on-github-archive-trYunus AydınHow I Found 3,800+ Leaked Secrets on GitHub Archive Using AI2026-06-30T00:00:00+00:002026-06-30T00:00:00+00:00https://aydinnyunus.github.io/2026/06/30/hunting-leaked-secrets-on-github-archiveYunus AydınNPM Tedarik Zinciri: Sahte İş Teklifiyle Gelen Info-Stealer2026-06-22T00:00:00+00:002026-06-22T00:00:00+00:00https://aydinnyunus.github.io/2026/06/22/fake-job-offer-npm-supply-chain-malware-foxtopia-trYunus AydınNPM Supply Chain Attack: Fake Job Offer Drops Info-Stealer2026-06-22T00:00:00+00:002026-06-22T00:00:00+00:00https://aydinnyunus.github.io/2026/06/22/fake-job-offer-npm-supply-chain-malware-foxtopiaYunus AydınOdysseus: AI Embedding Endpoint’inde Broken Access Control + SSRF (CVE-2026-70619, CVE-2026-70620)2026-06-16T00:00:00+00:002026-06-16T00:00:00+00:00https://aydinnyunus.github.io/2026/06/16/odysseus-embedding-endpoint-takeover-trYunus AydınOdysseus: Broken Access Control + SSRF in AI Embedding Endpoint (CVE-2026-70619, CVE-2026-70620)2026-06-16T00:00:00+00:002026-06-16T00:00:00+00:00https://aydinnyunus.github.io/2026/06/16/odysseus-embedding-endpoint-takeoverYunus Aydın