Cybersecurity Researcher from Sri Lanka, focused on application security and vulnerability research. I spend most of my time reverse engineering modern infrastructure, analyzing code flows, and discovering novel attack vectors.

Before getting into security, I was an active open source contributor, mainly with organizations like vercel and google, building developer tooling and improving the developer experience. That engineering background continues to shape how I approach vulnerability research, helping me understand complex systems from the inside out.

If you're interested in collaborating, email is the best way to reach me i check it pretty often [email protected].

.To be published after receiving permission from the affected organizations. 🚧

• vercel/ai#9437 - Introduced embedding model middleware for centralized embedding customization
• vercel/ai#11934 - Added support for embeddingTypes in cohere embeddings
• ChromeDevTools/chrome-devtools-mcp#729 - Allow opting out of default Chrome launch arguments
• ChromeDevTools/chrome-devtools-mcp#748 - Support resize_page when browser window is maximized
• TanStack/db#551 - Added select option to extract items while preserving metadata
• nodejs/userland-migrations#166 - Added support for rmdir imports with aliases
• nodejs/userland-migrations#168 - Implemented support for detecting member expression require nodes
• colinhacks/zod#4306 - Added debugging support with tsx runtime
• codemod/codemod#1895 - Next.js update for CVE-2025-67779