developer security
Cybersecurity & Risk
Mini Shai-Hulud: 630 Poisoned npm Packages in 20 Minutes — The Defense Checklist
⚡ Key Takeaways The Mini Shai-Hulud campaign deployed over 630 malicious npm package versions across 317 packages in approximately 20...
Cybersecurity & Risk
GitHub Breach via Poisoned VS Code Extension: Developer Supply Chain Security Lessons
⚡ Key Takeaways In May 2026, hacking group TeamPCP compromised a GitHub employee’s device through a poisoned VS Code extension,...
Cybersecurity & Risk
Supply Chain Breached: Grafana Hack and VS Code Malware Target Developers in 2026
⚡ Key Takeaways On May 18, 2026, the Nx Console VS Code extension (2.2 million installs) was compromised with a...
Cybersecurity & Risk
Quasar Linux RAT: How Stolen Developer Credentials Fuel Software Supply Chain Attacks
⚡ Key Takeaways Trend Micro researchers documented QLNX (Quasar Linux RAT), a sophisticated Linux implant that targets developer workstations to...
Cybersecurity & Risk
Dependency Security for Algerian Developers: Lessons from the Axios npm Compromise
⚡ Key Takeaways In March 2026, attackers attributed to North Korean group UNC1069 backdoored Axios — JavaScript’s most downloaded npm...
Cybersecurity & Risk
Self-Propagating npm Worms: Inside the pgserve Token-Stealing Supply Chain Attack
⚡ Key Takeaways On April 21, 2026 researchers disclosed pgserve, the first self-propagating npm worm. It harvests auth tokens on...
Cybersecurity & Risk
Shai-Hulud 2.0: What the Self-Propagating npm Worm Taught Us About Supply Chain Defense in 2026
⚡ Key Takeaways Shai-Hulud 2.0, the self-propagating npm worm discovered November 24, 2025, compromised 796+ unique packages across 1,092 versions,...
Cybersecurity & Risk
Omnistealer: The First Infostealer to Use the Blockchain as Command-and-Control
⚡ Key Takeaways Omnistealer is a newly analyzed infostealer that stores its staging code inside transactions on public blockchains (TRON,...
Cybersecurity & Risk
RoguePilot: How Hidden Instructions in GitHub Issues Let Attackers Hijack Repositories
Orca Security discovered RoguePilot, a passive prompt injection that let hidden GitHub Issue instructions hijack Copilot to leak tokens and take over repositories.
