malicious packages
Miasma: Red Hat Cloud Services npm Packages Hit by a Mini Shai-Hulud-Style Campaign
Compromised @redhat-cloud-services npm packages drop a multi-cloud credential stealer via a malicious preinstall hook ...
Laravel-Lang Composer tag-rewrite Supply Chain Attack
Four Laravel-Lang Composer packages were poisoned via tag rewrite ...
Mini Shai-Hulud Hits @antv: 323 npm Packages Compromised Through the atool Maintainer Account
Mini Shai-Hulud strikes again: 323 npm packages compromised via @antv's atool ...
Inside the RubyGems Supply Chain Attack: How Mend Defender Caught a Coordinated Flood Before It Spread
How Mend.io caught a coordinated RubyGems attack and what it teaches us ...
Mini Shai-Hulud Is Back: 172 npm and PyPI Packages Compromised in Latest Wave
33 malicious NPM packages target DeFi, cloud, and AI developer credentials ...
PhantomRaven Wave 5: New Undocumented NPM Supply Chain Campaign Targets DeFi, Cloud, and AI Developers
PhantomRaven Wave 5: New Undocumented NPM Supply Chain Campaign Targets DeFi, Cloud, and AI Developers ...
CVE-2026-31431 (Copy Fail): Linux Kernel LPE
New Linux 'copy_fail' LPE gives root on all major distros. Mitigate before patching ...
Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework
SAP CAP packages compromised via Claude Code in AI-assisted worm attack ...
The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets
Mend.io tracks TeamPCP's latest supply chain attack ...
A Poisoned Xinference Package Targets AI Inference Servers
Three poisoned xinference releases on PyPI target AI infrastructure credentials ...
