A large-scale software supply chain attack has forced npm to take unprecedented action, resetting thousands of … npm Resets Tokens After “Mini Shai-Hulud” Supply Chain AttackRead more
developer security
Poisoned IDE Extensions: Lessons from the 2026 GitHub Supply Chain Attack
The modern developer workspace has become the frontline of enterprise cyber warfare. Integrated Development Environments (IDEs), … Poisoned IDE Extensions: Lessons from the 2026 GitHub Supply Chain AttackRead more
Critical Vulnerability in Cline AI Agent Allows Remote Code Execution
A serious security flaw has been uncovered in the Cline Kanban server that puts developers’ workspace … Critical Vulnerability in Cline AI Agent Allows Remote Code ExecutionRead more
Malicious NuGet Packages Compromise 64K+ Developer Systems
A stealthy supply chain attack is quietly spreading through the .NET ecosystem, targeting developers and build … Malicious NuGet Packages Compromise 64K+ Developer SystemsRead more
Warning: New AI Malware Is Secretly Stealing Crypto Keys
The integration of AI into the software development lifecycle was supposed to eliminate human error. Instead, … Warning: New AI Malware Is Secretly Stealing Crypto KeysRead more
Brand-Squatting Alert: Fake “tanstack” npm Package Steals Developer Secrets
In the world of JavaScript development, TanStack (Query, Table, Router) is a gold standard. However, a … Brand-Squatting Alert: Fake “tanstack” npm Package Steals Developer SecretsRead more
Fake Job Interview Malware: Void Dokkaebi Attack Explained
A simple job interview could be all it takes to compromise your entire development environment. In … Fake Job Interview Malware: Void Dokkaebi Attack ExplainedRead more
36 Malicious npm Strapi Packages Used in Targeted Supply Chain Attack
A sophisticated software supply chain attack has been discovered targeting developers using Strapi. Attackers published 36 … 36 Malicious npm Strapi Packages Used in Targeted Supply Chain Attack Read more
Axios npm Supply Chain Attack: Detection, Risks, and Mitigation Guide
On March 31, 2026, the cybersecurity community faced a major wake-up call when a widely trusted … Axios npm Supply Chain Attack: Detection, Risks, and Mitigation Guide Read more
Backdoored Telnyx Python SDK on PyPI Steals Credentials Across Platforms
A new software supply chain attack has targeted developers after threat actors compromised the Telnyx Python … Backdoored Telnyx Python SDK on PyPI Steals Credentials Across PlatformsRead more