bunnyhijack-poc.git
bunnyhijack-poc.git is PoC demonstrating that Bun's trustedDependencies can be bypassed via bin PATH poisoning, allowing an untrusted package with zero lifecycle scripts to execute arbitrary code during bun install w.... It is ranked #560 on the Dev Radar, in Security, first seen 2 h ago and shared in 1 post (830 views).
GitHub - X3r0Day/BunnyHijack-PoC: PoC demonstrating that Bun's trustedDependencies can be bypassed via bin PATH poisoning, allowing an untrusted package with zero lifecycle scripts to execute arbitrary code during bun install with no trust prompt and no --trust flag. · GitHub Skip to content Navigation Menu Sign in Search / Sign in Sign up Appearance settings You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session. Dismiss alert {{ message }} Repository navigation…
What people said about bunnyhijack-poc.git on X
You know what, I'm glad this is all happening now. We gotta get our auth & PGP down , figure out trusted compute & everything before we're surrounded by robots.
— @nisten, 2 h ago · 10 likes · see the post
Alternatives to bunnyhijack-poc.git
- openai.com —
- security-audit-skill — I highly recommend cloudflare's security audit skill
- Vercel — Vercel Security Review is now in public beta. Every push to your GitHub repositories is reviewed for vulnerabilities,…
- OpenClaw — There’s more in the full notes
- go.dhs.gov — 🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These…
- nts.meta.com —
bunnyhijack-poc.git in numbers
- Rank on the Dev Radar: #560 of 9506
- Shared in 1 post by 1 account: @nisten
- 830 views on those posts
- First seen 2 h ago, last shared 2 h ago
- Pricing seen by AGK Intelligence: open source
- Market: Security
FAQ
What is bunnyhijack-poc.git?
PoC demonstrating that Bun's trustedDependencies can be bypassed via bin PATH poisoning, allowing an untrusted package with zero lifecycle scripts to execute arbitrary code during bun install w... It was first shared on X 2 h ago and is ranked #560 on the Dev Radar.
Is bunnyhijack-poc.git free?
It is open source.
Who shared bunnyhijack-poc.git?
1 account on X, including @nisten, in 1 post totalling 830 views.
Every post is read and classified by AGK Intelligence: what it is, which market it belongs to, and whether the link is a real tool. 31.8k posts from 5k X accounts over the last 21 days, 9.5k tools, 12 markets. New posts are collected several times an hour and the full ranking is recomputed every hour — last update 2026-11-06 19:17 UTC. Full method.