|
Not-So-Mini Mini Shai-Hulud Attack Hits 400+ NPM Packages
|
|
4
|
45
|
August 5, 2026
|
|
New AUR Attack Prompts Adoption Lock
|
|
0
|
62
|
July 30, 2026
|
|
Remember that Cursor git.exe bug? It's in VSCode too
|
|
8
|
63
|
July 16, 2026
|
|
Security Vulnerabilities in Telerik UI lead to RCE
|
|
1
|
22
|
July 16, 2026
|
|
Latest Miasma Attack Uses Blockchain Garbage You Should Have Already Blocked
|
|
1
|
47
|
July 14, 2026
|
|
Popular JS Obfuscator jscrambler Compromised
|
|
0
|
21
|
July 12, 2026
|
|
Rustsec and cargo-audit: Rust supply-chain safety tools
|
|
0
|
16
|
July 1, 2026
|
|
GuardDog 3.0, Python/NPM Scanner
|
|
0
|
17
|
July 1, 2026
|
|
Mini Shai-Hulud hits codfish/semantic-release
|
|
0
|
54
|
June 24, 2026
|
|
400+ AUR Packages Compromised with Infostealer and Rootkit
|
|
5
|
29685
|
June 12, 2026
|
|
VS Code Marketplace Jupyter Notebook Extention HidesDPRK Backdoor
|
|
0
|
31
|
June 10, 2026
|
|
A Linter Prevented a Shai Hulud Compromise
|
|
0
|
36
|
June 9, 2026
|
|
Microsoft Disabling Repos Related to Azure Functions, Durable Task
|
|
1
|
210
|
June 8, 2026
|
|
IronWorm: Shai-Hulud's rustier cousin
|
|
2
|
40
|
June 4, 2026
|
|
Binding.gyp Supply Chain Attack (via Miasma worm) Across npm Packages
|
|
0
|
14
|
June 4, 2026
|
|
Mini Shai-Hulud Hits Red Hat NPM Packages
|
|
3
|
124
|
June 2, 2026
|
|
VS Code Extensions: Risks and Mitigations | IFIN
|
|
0
|
277
|
June 1, 2026
|
|
GitHub Internal Repositories Compromised, Offered for Sale
|
|
2
|
1607
|
May 26, 2026
|
|
Laravel Packages Compromised in Yet Another GitHub Attack
|
|
1
|
411
|
May 23, 2026
|
|
5600+ GitHub accounts compromised in "Megalodon" attack
|
|
0
|
163
|
May 21, 2026
|
|
Megalodon - More Malicious Commits on GitHub
|
|
2
|
54
|
May 21, 2026
|
|
500+ NPM packages, including antv , compromised via single maintainer
|
|
0
|
225
|
May 19, 2026
|
|
Axios npm package compromised
|
|
10
|
78
|
May 18, 2026
|
|
Grafana compromised, codebase exfiltrated
|
|
1
|
94
|
May 17, 2026
|
|
Node-ipc NPM packages infected with stealer
|
|
4
|
131
|
May 14, 2026
|
|
Mini Shai-Hulud strikes again: TanStack, Mistral, OpenSearch npm packages compromised
|
|
3
|
243
|
May 14, 2026
|
|
RubyGems Halts All New Sign-Ups
|
|
0
|
20
|
May 12, 2026
|
|
Malware Found in Trending Hugging Face Repository "Open-OSS/privacy-filter"
|
|
0
|
17
|
May 10, 2026
|
|
Daemon-tools[.]cc compromised
|
|
7
|
116
|
May 6, 2026
|
|
PyTorch Lightning Library hit by supply chain attack
|
|
2
|
92
|
April 30, 2026
|