Lockhound (@lockhoundapp) profile picture

Lockhound

@lockhoundapp
Joined October 2026
  • Tweets15
  • Following25
  • Followers1
.@pascalbaljet the legend blessed us.
Taylor Otwell (@taylorotwell) profile pictureTaylor Otwell
@taylorotwellNov 2
Your Inertia pages can now update themselves in real time. ⚡️ Mark a prop as live and connect it to a broadcast event. Whenever that event fires, Inertia refreshes just that prop, without polling. Perfect for order statuses, unread counts and dashboards.
Image from Taylor Otwell (@taylorotwell)
9
9
1
186
16,699
Good time to signup for a trial. lockhound.app
Lockhound: dependency vulnerability monitoring for GitHub

Lockhound: dependency vulnerability monitoring for GitHub

Find the vulnerable, exploited and malicious dependencies in every GitHub repository, ranked by what to fix first, with a check on every pull request.

lockhound.app
The Hacker News (@TheHackersNews) profile pictureThe Hacker News
@TheHackersNewsNov 4
🚨 Node.js warns of HIGH-severity security vulnerabilities. Security fixes are coming November 11 for Node.js 26.x, 24.x, and 22.x. All three release lines are affected. Production users should take note. Details: nodejs.org/en/blog/vulnerabi…
Image from The Hacker News (@TheHackersNews)
1
3
Lockhound retweeted
Fawzan (@eFawzan) profile picture
Fawzan
@eFawzanNov 4
Commands for all of this (curl + jq, no product needed): lockhound.app/guides/priorit… We automate it across GitHub repos at lockhound.app. Try a lockfile at lockhound.app/check.
Prioritise vulnerabilities with CISA KEV and EPSS · Lockhound

Prioritise vulnerabilities with CISA KEV and EPSS · Lockhound

CVSS says how bad a vulnerability could be, not whether anyone exploits it. Add CISA's KEV catalog and EPSS scores to your triage, with commands to run today.

lockhound.app
1
29
Lockhound retweeted
Fawzan (@eFawzan) profile picture
Fawzan
@eFawzanNov 4
CVSS = how bad it could be. CISA KEV = attackers are using it now. FIRST EPSS = how likely it is to be exploited soon. You want all three.
3
1
69
Lockhound retweeted
Fawzan (@eFawzan) profile picture
Fawzan
@eFawzanNov 4
`npm audit` on an old project: 87 vulnerabilities. How many matter this week? Usually a handful. Here's how to find them 🧵
1
1
81
Lockhound retweeted
Fawzan (@eFawzan) profile picture
Fawzan
@eFawzanNov 3
Not sure what your vibe-coded app actually installed? Paste your package-lock.json, pnpm-lock.yaml or composer.lock at lockhound.app/check. No sign-up, nothing stored. You get what to fix first, not a wall of 87 warnings.
2
1
75
Lockhound retweeted
Fawzan (@eFawzan) profile picture
Fawzan
@eFawzanNov 3
Top 2 dependency vulnerabilities to fix (Nov 3): 1. @sd-jwt/core (npm): high, fix 0.20.0 2. @bytebase/dbhub (npm): medium, fix 0.22.6 lockhound.app/daily/2026-11-…
Dependency vulnerabilities to fix, Nov 3, 2026 · Lockhound

Dependency vulnerabilities to fix, Nov 3, 2026 · Lockhound

@sd-jwt/core, @bytebase/dbhub: the dependency vulnerabilities most worth fixing on Nov 3, 2026, ranked by exploitation, severity and reach.

lockhound.app
2
52
Live now on every paid plan. Code FREETEAM100 gives a month of Team free, 10 redemptions.
Fawzan (@eFawzan) profile pictureFawzan
@eFawzanNov 2
First 10 teams get a month of Lockhound Team free. Code: FREETEAM100 50 private repos, unlimited members, Slack alerts, PR checks, and the MCP server for your AI agent. lockhound.app/pricing
Pricing: free for 5 private repositories · Lockhound

Pricing: free for 5 private repositories · Lockhound

Start free with Lockhound: 5 private repositories and unlimited public ones. Flat monthly or yearly plans, never priced per seat.

lockhound.app
6
Lockhound retweeted
Fawzan (@eFawzan) profile picture
Fawzan
@eFawzanNov 2
Your AI agent installs packages you've never heard of. Today every paid plan of Lockhound plugs into Claude Code, Cursor, Copilot and Codex, and checks each package for known vulnerabilities and malware before it's installed. lockhound.app
Lockhound: dependency vulnerability monitoring for GitHub

Lockhound: dependency vulnerability monitoring for GitHub

Find the vulnerable, exploited and malicious dependencies in every GitHub repository, ranked by what to fix first, with a check on every pull request.

lockhound.app
2
2
1
133
Lockhound retweeted
Fawzan (@eFawzan) profile picture
Fawzan
@eFawzanNov 1
PolinRider hasn't stopped spreading. We investigated the malware campaign at Lockhound and found: • 303 infected GitHub repos missing from public lists • 101 still infected and active in October • A newer variant that hides malicious changes inside existing commits The scary part? Your Git history can look completely normal. Full research + how to check your repos: lockhound.app/guides/polinri…
PolinRider worm: 303 infected repos not on the lists · Lockhound

PolinRider worm: 303 infected repos not on the lists · Lockhound

We found 303 PolinRider-infected GitHub repos missing from the public lists, 101 active in October 2026, and a new variant of how the worm hides commits.

lockhound.app
2
1
65
Lockhound retweeted
Fawzan (@eFawzan) profile picture
Fawzan
@eFawzanNov 1
Lockhound flags exploited and malicious packages in your composer.lock and package-lock.json, and blocks PRs that add them. Try it on any public repo, no sign-up: lockhound.app/check
Check a lockfile for vulnerabilities, free · Lockhound

Check a lockfile for vulnerabilities, free · Lockhound

Upload package-lock.json, composer.lock, yarn.lock, pnpm-lock.yaml or poetry.lock and see which vulnerable packages to fix first. No sign-up, nothing stored.

lockhound.app
1
22
Lockhound retweeted
Fawzan (@eFawzan) profile picture
Fawzan
@eFawzanNov 1
New: paste any public GitHub repo and see which dependencies to fix first. Exploited, malicious, or just critical, ranked. No sign-up, nothing to install, nothing stored but the report. lockhound.app/check
Check a lockfile for vulnerabilities, free · Lockhound

Check a lockfile for vulnerabilities, free · Lockhound

Upload package-lock.json, composer.lock, yarn.lock, pnpm-lock.yaml or poetry.lock and see which vulnerable packages to fix first. No sign-up, nothing stored.

lockhound.app
1
30
Lockhound retweeted
Fawzan (@eFawzan) profile picture
Fawzan
@eFawzanNov 1
No high-impact dependency advisories today (Nov 1). lockhound.app/daily/2026-11-…
Dependency vulnerabilities to fix, Nov 1, 2026 · Lockhound

Dependency vulnerabilities to fix, Nov 1, 2026 · Lockhound

The dependency vulnerabilities most worth fixing on Nov 1, 2026, ranked by exploitation, severity and reach.

lockhound.app
2
37
Top 5 dependency vulnerabilities to fix (Oct 31): 1. node-forge (npm): high, fix 1.4.1 2. pypdf (Python): high, fix 6.21.4 3. follow-redirects (npm): high, fix 1.16.2 4. joi (npm): high, fix 18.3.1 5. glob (npm): medium, fix 14.0.2 lockhound.app/daily/2026-10-…
Dependency vulnerabilities to fix, Oct 31, 2026 · Lockhound

Dependency vulnerabilities to fix, Oct 31, 2026 · Lockhound

node-forge, pyasn1, pypdf and more: the dependency vulnerabilities most worth fixing on Oct 31, 2026, ranked by exploitation, severity and reach.

lockhound.app
2
10
Lockhound retweeted
Fawzan (@eFawzan) profile picture
Fawzan
@eFawzanOct 30
Your AI agent installs packages you've never heard of. Lockhound now works with Claude Code, Cursor, Copilot, and Codex to check packages for known vulnerabilities and malware before they're installed. Available on all paid plans. lockhound.app
Lockhound: dependency vulnerability monitoring for GitHub

Lockhound: dependency vulnerability monitoring for GitHub

Find the vulnerable, exploited and malicious dependencies in every GitHub repository, ranked by what to fix first, with a check on every pull request.

lockhound.app
2
1
1
60
Load more