…This is a developing story... The Validation Gap: Automated Pentesting Answers One Question. You Need Six. Automated pentesting tools deliver real value, but they were built to answer one question: can an…
…and over 180 million developers who contribute to more than 420 million code repositories. The Validation Gap: Automated Pentesting Answers One Question. You Need Six. Automated pentesting tools deliver real value, but…
…In the ongoing Shai-Hulud malware campaign attributed to TeamPCP hackers, dozens of TanStack packages infected with credential-stealing code were published on the npm index, compromising developer environments, including Grafana's…
…The cybercrime group later developed its own ransomware strain using leaked Conti 2 builder code . However, according to Coveware security researchers, "a coding mistake in the ESXi malware causes it to encrypt…
…Most recently, multiple official SAP npm packages were compromised in a supply-chain attack aimed at stealing credentials and authentication tokens from developers' systems. As the world's largest vendor of enterprise…
…Mistral AI told BleepingComputer that the TeamPCP managed to contaminate some of the company’s software development kit (SDK) packages. In an advisory published earlier this week, the company said that the…
…In the later stages of the attack, Storm-2949 deployed the ScreenConnect remote access tool on compromised systems, attempted to disable Microsoft Defender protections, and wipe forensic evidence. It should be noted…
Laravel Lang packages hijacked to deploy credential-stealing malware By Lawrence Abrams May 23, 2026 04:48 PM A supply chain attack targeting the Laravel Lang localization packages has exposed developers to…
…Once it compromises a developer or CI environment, it can publish trojanized versions of packages owned by the victim, which then infect additional developers and CI systems. This behavior is conceptually similar…
…If the host is not Russian, Reaper retrieves and executes the malicious AppleScript with the data theft routine using the osascript command-line tool built into macOS. Upon launch, it prompts the…