On June 11th 2026, security researchers and the Arch Linux community disclosed a large-scale supply-chain attack against the Arch User Repository (AUR). Attackers hijacked more than 400 community ...
On October 29, 2026, trojanized builds (2.1.312 and 2.1.313) of the official Claude Code VS Code extension were published to Cursor's VS Code Extension Marketplace for macOS and Windows.
The Shai-Hulud NPM Worm Returns as "Sha1-Hulud: The Second Coming" - Devastating Supply Chain Attack Compromises Zapier and ENS Ecosystems, Creates 22,000+ Malicious Repositories and counting ...
litellm 1.107.0 shipped a credential stealer and an hourly remote code loader in all seven PyPI wheels and the official Docker images. The attacker hijacked BerriAI's release workflow with a GitHub ...
The FBI has attributed Binance’s $6 billion-plus theft to North Korea’s TraderTraitor activity. As investigators work to establish the full intrusion sequence, the incident highlights why developer ...
Compromised eMudhra intermediate CA keys put Python dependency downloads at risk. Here are the affected tools, verified certificate-trust results, and remediation steps for pip, uv, virtual ...
Inventory the Claude Code and Codex plugins on developer machines and in your GitHub repositories: where each came from, what it bundles, whether it is enabled, and which repositories distribute it.
Harden-Runner’s behavioral monitoring has surfaced multiple supply chain attacks. The tj-actions/changed-files compromise is one example: the compromised action contacted gist.githubusercontent.com to ...
Read the blog to explore how StepSecurity stood out and earned a spot in CRN’s 10 Hottest DevOps Startups of 2024. Binance’s initial findings pointed to a possible DevOps laptop compromise, followed ...
On October 5, 2026, StepSecurity analyzed @subql/common@5.8.3 on npm and identified a hidden payload that collects credentials and supports remote shell access. It starts during installation and when ...
Version 18.95.0 of the popular Nx Console extension (2.2M+ installs) was published with malicious code targeting developer credentials, cloud infrastructure tokens, and CI/CD secrets.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results