OpenHack12 min read
CVE-2026-36755: How OpenHack hacked Papermark and got unlimited uploads
How OpenHack found, validated, and verified a missing await that turned Papermark's authenticated upload route into a public pipe for unlimited uploads.
Back to blog
Supply Chain Security11 min read
Inside a 37-Package npm Typosquatting Campaign Targeting Windows and WSL
OpenHack correlated 37 npm typosquats carrying the same install-time dropper, decoded its XOR-obfuscated configuration, and traced a Windows and WSL infostealer chain from npm postinstall to credential exfiltration.
OpenHack6 min read
Introducing OpenHack: The Open-Source AI Security Agent
OpenHack is now live — an open-source AI security agent that hunts, validates, and verifies real vulnerabilities in your code. It runs on open-source models at 40× the cost-efficiency of Claude Opus 4.6 on CVE-Bench.