Hundreds of trojanized versions of well-known packages such as Zapier, ENS Domains, PostHog, and Postman have been planted in the npm registry in a new Shai-Hulud supply-chain campaign. The malicious ...
New capability for the Salt Illuminate™ platform moves discovery "From Code to Context," identifying risky MCP servers and shadow APIs before deployment. With GitHub Connect, Salt enables customers to ...
A spate of supply chain attacks forces GitHub’s npm to revoke ‘classic’ tokens. Despite this, larger worries about developer ...
Researchers found malicious VS Code extensions and Go, npm, and Rust packages stealing developer data via hidden payloads and exfiltration.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback