July 2026, blocking install scripts, Git dependencies, and remote URL sources by default. Every team running npm install in ...
GitHub disabled 73 repositories across four Microsoft organizations on June 5 after the self-replicating supply-chain campaign known as ...
Over 100 NPM and PyPI packages were injected with malicious code in the Miasma and Hades Shai-Hulud supply chain attack ...
Threat actors have struck the software supply chain yet again, this time hitting the Python Package Index (PyPI) with Mini Shai-Hulud in an attempt to spread poisoned code. In the latest campaign, ...
Researchers at Cyera found six vulnerabilities in prtobuf.js, including a flaw that can turn attacker-controlled schema data ...
Miasma compromised 32 Red Hat packages June 1 via a hijacked CI/CD pipeline producing valid SLSA attestations, then hit 57 more June 3 using Phantom Gyp to evade install monitors. Red Hat confirmed no ...
Vercel has released Next.js 16.2, featuring performance enhancements that make development startup 400% faster and rendering ...
Microsoft Threat Intelligence identified a large-scale npm supply chain attack affecting 32 maliciously modified packages across more than 90 versions under the @redhat-cloud-services npm scope. The ...
Red Hat hit by npm supply‑chain attack - here's how to stay safe ...
Loki is a stage-1 command and control (C2) framework written in Node.js, built to script-jack vulnerable Electron apps MITRE ATT&CK T1218.015. Developed for red team operations, Loki enables evasion ...
Shelly Pro Dimmer 0/1-10V PM SPCC-001PE10EU Dimmer Shelly Pro 3 SPSW-003XE16EU Relay Shelly Pro 3EM SPEM-003CEBEU Measure Shelly Pro 3EM SPEM-003CEBEU120 Measure Shelly Pro 3EM-400 SPEM-003CEBEU400 ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results