On May 15, 2026, the global software supply chain faced a massive escalation as the notorious … Warning: Massive New Shai-Hulud Worm Devours Developer Platform SecretsRead more
npm malware
3 Ways New OpenAI Hack Steals Your Private Code Data
On May 15, 2026, OpenAI confirmed that its corporate network was breached following a sweeping, upstream … 3 Ways New OpenAI Hack Steals Your Private Code DataRead more
Warning: New AI Malware Is Secretly Stealing Crypto Keys
The integration of AI into the software development lifecycle was supposed to eliminate human error. Instead, … Warning: New AI Malware Is Secretly Stealing Crypto KeysRead more
5 Ways the “Mini Shai-Hulud” Worm Steals Your CI/CD Secrets
On April 29, 2026, security researchers at StepSecurity, Wiz, and Socket identified a highly sophisticated supply … 5 Ways the “Mini Shai-Hulud” Worm Steals Your CI/CD SecretsRead more
36 Malicious npm Strapi Packages Used in Targeted Supply Chain Attack
A sophisticated software supply chain attack has been discovered targeting developers using Strapi. Attackers published 36 … 36 Malicious npm Strapi Packages Used in Targeted Supply Chain Attack Read more
CanisterWorm Spreads Through npm Accounts Stealing Tokens
A new supply chain malware campaign called CanisterWorm is targeting the npm ecosystem by compromising publisher … CanisterWorm Spreads Through npm Accounts Stealing TokensRead more
Lazarus Group’s ‘Graphalgo’ Fake Recruiter Campaign Targets Crypto Developers
Since May 2025, the North Korean state-sponsored hacking team, Lazarus Group, has been running a highly … Lazarus Group’s ‘Graphalgo’ Fake Recruiter Campaign Targets Crypto DevelopersRead more
Dangerous duer-js NPM Package Infects Windows Users
A malicious NPM package named duer-js has been discovered targeting Windows users and developers. Disguised as … Dangerous duer-js NPM Package Infects Windows UsersRead more
GitHub Actions Exploited by Shai Hulud v2 to Steal Secrets
The software supply chain faces a new and sophisticated threat: Shai Hulud v2, a malware campaign … GitHub Actions Exploited by Shai Hulud v2 to Steal SecretsRead more