Gheist GitHub Attack: What I'd Check Before the Next Deploy
The Gheist GitHub attack uses stolen tokens to expose Actions secrets. I'd check workflow history, cloud access and approval gates before trusting the next deploy.
Tech blogReact · AI · Architecture235 articles
Tech blog · India
Tech blogs on code, architecture and AI.
Deep dives into React.js, AI and ML integration, MERN stack patterns, and lessons from building production applications at scale in India — written by Deepak Kumar.
What it covers
- javascript92 articles
- node.js83 articles
- Engineering75 articles
- devops56 articles
+ 470 more topics in the archive
235 articlesLatest · Nov 2026
Showing 2 articles tagged incident-response. Clear filter
Google reports disrupting the XCPE botnet; I look at firmware persistence, device isolation, and what I’d check before trusting affected hardware again.
Read the articleAbout the author
Deepak Kumar
Sr Software Engineer at India Today Group | Aaj Tak
Building scalable web applications and Generative AI systems. Writing about React, Node.js, AI and the engineering lessons from 9+ years of production work.
More about meHiring, or need something built?
Open to senior full-stack and AI engineering roles, and to focused contract work. Delhi NCR or fully remote. I reply within 24 hours.
What I take on
Full-stack product build
React, Next.js, Node, NestJS, MongoDB and MySQL — from idea to production.
AI features that ship
OpenAI and LangChain, RAG, semantic search, content and voice automation.
Architecture and scale
Microservices, real-time pipelines and caching — proven at national news scale.
Founding engineer work
Idea to MVP to scale, with SEO and analytics built in from the start.