Notes on things I'm building and learning as an engineer.https://shahad.dev/https://shahad.dev/blog/polin-rider-attack/https://shahad.dev/blog/polin-rider-attack/How a supply-chain attack stole our CTO's token, rewrote our repositories, and quietly reached my own account — a first-person account of the PolinRider / Glassworm incident, and what it taught me about trust, Git, and backups.Thu, 02 Jul 2026 00:00:00 GMThttps://shahad.dev/blog/recovering-from-the-polin-rider-attack/https://shahad.dev/blog/recovering-from-the-polin-rider-attack/The technical field report: how a stolen GitHub PAT was used to force-push malware into four repositories I had write access to, how I found it, and the exact commands I used to recover every repo from a clean local copy — and to reconstruct one where I had no local copy at all.Thu, 02 Jul 2026 00:00:00 GMT