Ananay Arora

Founder, OpenHack

Articles by Ananay Arora

An OpenHack security agent discovers a broken authentication gateway while documents flow into cloud storage

CVE-2026-36755: How OpenHack hacked Papermark and got unlimited uploads

How OpenHack found, validated, and verified a missing await that turned Papermark's authenticated upload route into a public pipe for unlimited uploads.

Ananay AroraAugust 22, 2026

Read article

Thirty-seven npm typosquat packages converging through Windows and WSL into an infostealer targeting credentials, cryptocurrency wallets, and Telegram data

Threat Intelligence11 min read

Inside a 37-Package npm Typosquatting Campaign Targeting Windows and WSL

OpenHack correlated 37 npm typosquats carrying the same install-time dropper, decoded its XOR-obfuscated configuration, and traced a Windows and WSL infostealer chain from npm postinstall to credential exfiltration.

Ananay AroraAugust 17, 2026

Read article

Announcements5 min read

Introducing OpenHack: Always on AI Security Engineer

OpenHack is your Always on AI Security Engineer. Find the vulnerabilities. Prove the impact. Ship the fix.

Ananay AroraJune 10, 2026

Read article