Skip to content

Andrew Nesbitt personal blog

Incident Report: CVE-2024-YIKES

nesbitt.io published 2026-02-036 min read

A series of unfortunate events.

Read on nesbitt.io → Discuss on HN (179) Archived copy

Points: 712
HN comments: 179
Submissions: 1
Cited by: 0 commenters

Security & Privacy Infrastructure & DevOps 2026

On Hacker News

Submitted	Title on HN	Points	Comments
May 10, 2026	Incident Report: CVE-2024-YIKES by miniBill	712	179

More from Andrew Nesbitt

All 12 posts →

How uv got so fast

20251,290 points459 commentscited by 7Software Engineering details

Package managers keep using Git as a database, it never works out

2025784 points465 comments Infrastructure & DevOps details

Incident CVE-2026-LGTM

2026598 points93 commentscited by 3Security & Privacy details

GitHub Actions has a package manager, and it might be the worst

2025444 points262 commentscited by 4Infrastructure & DevOps details

GitHub Actions is the weakest link

2026252 points93 comments Infrastructure & DevOps details

Sandwich Bill of Materials

2026241 points26 comments Tools & Productivity details

Related posts from the same era

Claude Code is steganographically marking requests

Thereallo20262,445 points750 commentscited by 3 details

Motorola announces a partnership with GrapheneOS

Motorola News20262,358 points884 commentscited by 10 details

The newest Instagram “exploit” is the goofiest I've seen

Sid20262,210 points491 commentscited by 3 details

Everyone knows your location: tracking myself down through in-app ads

Tim Shmykov20251,957 points600 commentscited by 3 details

Axios compromised on NPM – Malicious versions drop remote access trojan

StepSecurity Blog20261,934 points807 comments details

Our investigation into the suspicious pressure on Archive.today

AdGuard DNS Blog20251,816 points443 comments details