https://hackyjs.com/posts/auditing-vite-dev-servers-for-env-exposure-via-fs-and-the-hmr-socket Hacky JS en 2026-09-15T00:00:00.000Z Auditing Vite Dev Servers for .env Exposure via /@fs and the HMR Socket vite, security, javascript, cloud-security, devsecops https://hackyjs.com/posts/reading-the-axios-npm-diff-how-a-postinstall-hook-turns-into-ci-rce Hacky JS en 2026-09-15T00:00:00.000Z Reading the Axios npm Diff: How a Postinstall Hook Turns Into CI RCE npm, supply-chain-security, ci-cd, javascript, rce