Resultados

2 casos · pág. 1/1

aikido.dev · há 2h low

Aikido guide on supply chain defenses drawing on axios, tj-actions, CanisterWorm, GlassWorm and postmark-mcp compromises

Aikido Security published a best-practices guide for defending against software supply chain attacks. It cites Aikido Intel data: about 7.5 million package versions analyzed in Q2 2026, with 19,500 malicious packages confirmed. The guide uses recent incidents to show which controls would have worked: the axios compromise, tj-actions/chang…

technology software development

safedep.io · há 2d critical

npm worm poisons 2,234 versions across 444 packages, including keyv and cacheable, stealing cloud and CI credentials

On 4 August 2026, an npm worm published 2,234 poisoned versions across 444 package names, using credentials from twelve organisations. Affected scopes include @ornikar, @deliveroo, @onereach, @or-sdk, @servicetitan, @qlik, @picsart, and the keyv and cacheable families. The keyv, flat-cache, file-entry-cache and cacheable-request packages …

technology software_development