#Developer Security
Posts tagged Developer Security. 11 articles.
supply chain attack|4 min read
MALFEX’s `imgdecode` Package Shows Why Native npm Addons Need Supply-Chain Scrutiny
Read More
Threat Hunting & Intel|8 min read
North Korea's Contagious Interview campaign turns job tests into malware delivery
Read More
supply chain attack|6 min read
Rust crate owners targeted in video-call supply chain campaign
Read More
supply chain attack|8 min read
Mastra npm compromise turns AI agent builds into credential-theft risk
Read More
vulnerability|7 min read
One-Click github.dev Attack Lets Malicious Repos Steal Full GitHub Tokens
Read More
Threat Hunting & Intel|6 min read
GlassWorm takedown shows how developer malware becomes supply-chain risk
Read More
Supply Chain Security|6 min read
GitHub GHES Signing Key Rotation Puts Admins on the Clock
Read More
supply chain attack|6 min read
GitHub Action tag hijack turns CI/CD runs into credential theft
Read More
Supply Chain Security|5 min read
GlassWorm sleeper extensions turn Open VSX updates into a malware delivery path
Read More
Threat Hunting & Intel|5 min read
GlassWorm Shifts to Transitive Open VSX Dependencies in Developer Supply-Chain Push
Read More
Threat Hunting & Intel|5 min read
Cline CLI 2.3.0 supply chain attack silently installed OpenClaw on developer systems
Read More
Follow the research
New vulnerability analysis, threat actor reporting, and supply chain research as we publish it.
Recent Posts
- XCPE Backdoor Turns Android TV Boxes into a Supply-Chain Botnet
- NCSC Warns AI-Cyber Will Scale Attacks on UK Critical Infrastructure by 2028
- Ivanti Connect Secure Chain Gets a Second Patch Deadline as Root-Level Exploitation Stays Active
- GitLab CVE-2026-97229: Active Exploitation Turns CI/CD Into an Emergency Patch Queue
- NetamLoader Targets Government Windows: The Update Folder Is Now a Hunting Surface