extuno
Blog
Supply-chain research and findings.
Field notes on the update-channel attack, how Extuno catches it, and what vulnerability, secret-leak, static, dynamic, and AI analysis each contribute.
| Category | Date | Author | Article | Read | |
|---|---|---|---|---|---|
| Research | 2026-06-28 | Tolga SEZER | How an extension turns malicious after an update | 6 min | -> |
| Guide | 2026-06-30 | Tolga SEZER | npm typosquatting and dependency confusion, explained | 7 min | -> |
| Explainer | 2026-07-02 | Tolga SEZER | What browser extension permissions actually expose | 6 min | -> |
| Guide | 2026-07-04 | Tolga SEZER | Finding leaked secrets in CI before they ship | 6 min | -> |
| Field note | 2026-08-04 | Tolga SEZER | Installing a package is running it | 8 min | -> |
