corpus.blog
43,567 blogs · 5,563,491 posts Claim your blog
Back to research.jfrog.com
Blog · corpus.blog/blogs/research.jfrog.com/posts

research.jfrog.com

research.jfrog.com

2026

Equation of Compromise: Anatomy of a Live npm Supply-Chain Campaignoriginal ↗
21 Sept 2026
New packages identified in GemStuffer 'OpenAI Swarm' malicious RubyGems campaignoriginal ↗
15 Sept 2026
Bifrost is vulnerable to Unauthenticated Remote Code Execution via MCP Stdio Client Registrationoriginal ↗
14 Sept 2026
Parallels Desktop is vulnerable to a Local Privilege Escalation via Appliance Extract Argument Injectionoriginal ↗
14 Sept 2026
Bifrost is vulnerable to Unauthenticated Remote Code Execution via a Custom Plugin HTTP Path on Dynamically Linked Buildsoriginal ↗
6 Sept 2026
When "Critical" Loses Context: The Reality of Spring CVEsoriginal ↗
3 Sept 2026
Pake is vulnerable to Arbitrary File Write via Unsanitized download_file Filenameoriginal ↗
30 Aug 2026
Shai-Hulud Trinitite Hits @7nohe/openapi-react-query-codegenoriginal ↗
30 Aug 2026
Compromised Rust crates on crates.io silently execute malware at build timeoriginal ↗
20 Aug 2026