On April 29, 2026, a highly targeted supply chain attack hit the JavaScript ecosystem. An attacker … Malicious “tanstack” Package Hijacks npm to Steal Dev SecretsRead more
supply chain attack
Critical Warning: Popular “Lightning” AI Framework Hacked in Massive Supply Chain Attack
On April 30, 2026, the Socket Research Team issued an emergency alert: the widely used PyPI … Critical Warning: Popular “Lightning” AI Framework Hacked in Massive Supply Chain AttackRead more
The 5-Year Sleeper: Popular WordPress Plugin “Hacked” Since 2020 to Inject Secret Code
In one of the most patient supply chain attacks in WordPress history, a popular plugin with … The 5-Year Sleeper: Popular WordPress Plugin “Hacked” Since 2020 to Inject Secret CodeRead more
Warning: New AI Malware Is Secretly Stealing Crypto Keys
The integration of AI into the software development lifecycle was supposed to eliminate human error. Instead, … Warning: New AI Malware Is Secretly Stealing Crypto KeysRead more
Warning: AI Coding Tools at Risk—Cursor Vulnerability Exposes All Your Developer Tokens
In the race to build faster with AI, security is often left in the rearview mirror. … Warning: AI Coding Tools at Risk—Cursor Vulnerability Exposes All Your Developer TokensRead more
Warning: This Dangerous New Malware Steals Your Crypto and Files
For years, the cybersecurity landscape was divided: traditional malware (RATs and botnets) targeted system credentials, while … Warning: This Dangerous New Malware Steals Your Crypto and FilesRead more
Brand-Squatting Alert: Fake “tanstack” npm Package Steals Developer Secrets
In the world of JavaScript development, TanStack (Query, Table, Router) is a gold standard. However, a … Brand-Squatting Alert: Fake “tanstack” npm Package Steals Developer SecretsRead more
5 Ways the “Mini Shai-Hulud” Worm Steals Your CI/CD Secrets
On April 29, 2026, security researchers at StepSecurity, Wiz, and Socket identified a highly sophisticated supply … 5 Ways the “Mini Shai-Hulud” Worm Steals Your CI/CD SecretsRead more
Supply Chain Escalation: Checkmarx GitHub Data Leaked on Dark Web
What began as a supply chain disruption has evolved into a major data leak. Checkmarx, a … Supply Chain Escalation: Checkmarx GitHub Data Leaked on Dark WebRead more
Supply Chain Alert: 1M Monthly Downloads Hacked in ‘Elementary-Data’ Poisoning
In a sophisticated display of software supply chain interference, the widely used data observability tool elementary-data … Supply Chain Alert: 1M Monthly Downloads Hacked in ‘Elementary-Data’ PoisoningRead more