corpus.blog
43,567 blogs · 5,563,491 posts Claim your blog
Back to safedep.io
Blog · corpus.blog/blogs/safedep.io/posts

safedep.io

safedep.io

2026

An Attacker Hijacked an AI Coding Assistant to Spread a Wormoriginal ↗
2 Oct 2026
PolinRider Switches to Ethereum C2 in 30+ Repositoriesoriginal ↗
30 Sept 2026
DirtyBlanket: Fake Express Packages on npm Spread a Linux Wormoriginal ↗
29 Sept 2026
Detecting Compromised AI Coding Agents with Jev and Gryphoriginal ↗
25 Sept 2026
Mini Shai-Hulud Is Still Infecting GitHub Repositoriesoriginal ↗
24 Sept 2026
MemTensor npm and PyPI Packages Hit by a Go Wormoriginal ↗
23 Sept 2026
sckit: A New Go Implant Framework for Supply Chain Wormsoriginal ↗
23 Sept 2026
OpenAI Agents Turned RubyGems Into a Scraping Proxyoriginal ↗
18 Sept 2026
Why Does an npm Math Library Need an Encrypted Loader?original ↗
18 Sept 2026
The Agentic IDE Extension Blind Spotoriginal ↗
11 Sept 2026
Deep-Live-Cam Supply Chain Attack: Technical Analysisoriginal ↗
9 Sept 2026
Introducing SafeDep Threat Inteloriginal ↗
8 Sept 2026
A malicious npm package hidden three dependencies deep: the ulid-xyz delivery chainoriginal ↗
1 Sept 2026
Mini Shai-Hulud Strikes Again: openapi-react-query-codegenoriginal ↗
29 Aug 2026
From YouTube Ad to Root: How a Fake TradingView Installer Delivers a macOS Stealeroriginal ↗
21 Aug 2026
Malicious Rust Crate arrayref Runs a Build-Time Payloadoriginal ↗
20 Aug 2026
npm Bin Entry Harvesting: A Dependency Confusion Blind Spotoriginal ↗
14 Aug 2026
Baileys npm forks farm WhatsApp Channel followersoriginal ↗
10 Aug 2026
keyv and cacheable npm compromise: 400+ packagesoriginal ↗
4 Aug 2026
Joyfill npm Packages Compromised with Blockchain C2 Loaderoriginal ↗
29 Jul 2026
mrmustard PyPI Package Trojanized to Steal Credentialsoriginal ↗
24 Jul 2026
@copilot-mcp/apex: A macOS Infostealer Re-Published on npm After Takedownoriginal ↗
22 Jul 2026
AsyncAPI Packages Compromised with Miasma RAToriginal ↗
14 Jul 2026
Official jscrambler npm Package Compromised Across Multiple Releasesoriginal ↗
11 Jul 2026
nodemon-sudo: an npm Backdoor With No Install Scriptoriginal ↗
9 Jul 2026
@marketfront: 25 npm Packages Reuse a Known Lureoriginal ↗
2 Jul 2026
The Polymarket Trap: A Fake Arbitrage Bot, Ten npm Accounts, and Four Ways to Deliver an Infostealeroriginal ↗
30 Jun 2026
Miasma Worm Infects Multiple LeoPlatform npm Packagesoriginal ↗
25 Jun 2026
The wshu.net npm Campaign Delivers a Multi-Stage Infostealeroriginal ↗
23 Jun 2026
MYRA: A Full Linux RAT Distributed via npmoriginal ↗
21 Jun 2026
@withgoogle/stitch-sdk: Scope Squat Harvests Developer Credentialsoriginal ↗
20 Jun 2026
Five npm Packages That Hide a Windows Binary Dropperoriginal ↗
17 Jun 2026
Mastra npm Scope Takeover: 143 Packages Drop a RAToriginal ↗
17 Jun 2026
astro.config.mjs Supply Chain Attack via Blockchain C2original ↗
12 Jun 2026
Miasma Worm: Most Infected GitHub Repos Are Still Liveoriginal ↗
11 Jun 2026
Inside the Miasma Software Supply Chain Attack Toolkitoriginal ↗
9 Jun 2026
Config Files That Run Code: Supply Chain Security Blindspotoriginal ↗
6 Jun 2026
Miasma Worm Targets AI Coding Agents via GitHub Reposoriginal ↗
5 Jun 2026
Axios Typosquats Deliver the Epsilon Stealeroriginal ↗
2 Jun 2026
Mini Shai-Hulud "Miasma: The Spreading Blight" Hits @redhat-cloud-services: Multiple Packages at Riskoriginal ↗
1 Jun 2026
Inside MicrosoftSystem64: A Supply Chain RAT Exfiltrating to HuggingFaceoriginal ↗
28 May 2026
183 npm Packages Target Cloud and Finance via oob.moika.techoriginal ↗
28 May 2026
141 npm Packages Abuse Registry as Adware Hostingoriginal ↗
27 May 2026
forge-jsxy: 22 Versions of an Actively Developed npm RAToriginal ↗
26 May 2026
Megalodon: Mass GitHub Repo Backdooring via CI Workflowsoriginal ↗
21 May 2026
Polymarket npm Packages Steal Crypto Wallet Keysoriginal ↗
21 May 2026
art-template npm Hijack Delivers iOS Browser Exploit Kitoriginal ↗
20 May 2026
Malicious durabletask on PyPI: Multi-Cloud Credential Stealer with Worm Capabilitiesoriginal ↗
20 May 2026
Mini Shai-Hulud Strikes Again: 317 npm Packages Compromisedoriginal ↗
19 May 2026
Compromised node-ipc on npm: Credential Stealer via DNS Exfiltrationoriginal ↗
14 May 2026
Malicious npm Packages Backdoor Claude Code Sessionsoriginal ↗
13 May 2026
Cache Poisoning Through pull_request_target: The TanStack Incidentoriginal ↗
13 May 2026
Mass Supply Chain Attack Hits TanStack, Mistral AI npm and PyPI Packagesoriginal ↗
12 May 2026
Endpoint Protection for Developer Machinesoriginal ↗
11 May 2026
noon-contracts npm Package: DeFi Supply Chain RAToriginal ↗
10 May 2026
martinez-polygon-clipping-tony: Trojanized npm Fork Drops Telegram RAToriginal ↗
7 May 2026
node-env-resolve: npm Package Installs a Full RAToriginal ↗
3 May 2026
common-tg-service: 502 npm Versions Hijack Telegramoriginal ↗
1 May 2026
exiouss: Cookie Stealer Bundled in npm Exam Cheatoriginal ↗
1 May 2026
PyTorch Lightning Compromised: Shai-Hulud Worm Reaches PyPIoriginal ↗
30 Apr 2026
Mini Shai Hulud and SAP Compromiseoriginal ↗
29 Apr 2026
Malicious redeem-onchain-sdk npm Targets Crypto Walletsoriginal ↗
29 Apr 2026
npm-global-util: Credential Theft and Supply Chain Attackoriginal ↗
29 Apr 2026
Bitwarden CLI Supply Chain Compromiseoriginal ↗
24 Apr 2026
Malicious Pull Requests: A Threat Modeloriginal ↗
22 Apr 2026
ixpresso-core: Windows RAT Disguised as a WhatsApp Agentoriginal ↗
16 Apr 2026
PMG dependency cooldown: wait on fresh npm versionsoriginal ↗
16 Apr 2026
forge-jsx npm Package: Purpose-Built Multi-Platform RAToriginal ↗
15 Apr 2026
Malicious npm Package js-logger-pack Ships a Multi-Platform WebSocket Stealeroriginal ↗
15 Apr 2026
Malicious dom-utils-lite npm SSH Backdoor via Supabaseoriginal ↗
14 Apr 2026
Malicious npm Dependency Confusion Campaign Targets Genoma UI and Othersoriginal ↗
10 Apr 2026
big.js Typosquat Campaign Implants SSH Backdoorsoriginal ↗
9 Apr 2026
@fairwords npm Packages Hit by Credential Wormoriginal ↗
8 Apr 2026
Malicious @velora-dex/sdk Delivers Go RAT via npmoriginal ↗
8 Apr 2026
Malicious hermes-px on PyPI Steals AI Conversationsoriginal ↗
6 Apr 2026
prt-scan: A 5-Phase GitHub Actions Credential Theft Campaignoriginal ↗
3 Apr 2026
Thirty-Six Malicious npm Strapi Packages Deploy Redis RCE, Database Theft, and Persistent C2original ↗
3 Apr 2026
Compromised npm Package mgc Deploys Multi-Platform RAToriginal ↗
3 Apr 2026
Malicious npm Package express-session-js Drops Full RAT Payloadoriginal ↗
2 Apr 2026
axios Compromised: npm Supply Chain Attack via Dependency Injectionoriginal ↗
31 Mar 2026
Compromised telnyx on PyPI: WAV Steganography and Credential Theftoriginal ↗
27 Mar 2026
Malicious litellm 1.82.8: Credential Theft and Persistent Backdoororiginal ↗
24 Mar 2026
sl4x0 Dependency Confusion: 92 Packages Target Fortune 500original ↗
24 Mar 2026
Trivy Supply Chain Compromise: What Happened, What Was Stolen, and How to Respondoriginal ↗
23 Mar 2026
Malicious npm Package react-refresh-update Drops Cross-Platform Trojan on Developer Machinesoriginal ↗
16 Mar 2026
How to Write Time-Based Security Policies in SafeDep vetoriginal ↗
10 Mar 2026
Threat Modeling the AI-Native SDLC: Supply Chain Security in the Age of Coding Agentsoriginal ↗
9 Mar 2026
Malicious npm Package pino-sdk-v2 Exfiltrates Secrets to Discordoriginal ↗
6 Mar 2026
Gryph: Audit Trail for AI Coding Agentsoriginal ↗
4 Mar 2026
Integrate SafeDep MCP in GitHub Agentic Workfloworiginal ↗
27 Feb 2026
Shadow AI Discovery: Find Every AI Tool and SDK in Your Stackoriginal ↗
27 Feb 2026
Malicious npm Packages Target Schedaero via Dependency Confusionoriginal ↗
25 Feb 2026
npm SANDWORM_MODE Attack: Step-by-Step Malware Analysisoriginal ↗
21 Feb 2026
AI Agent Cline v2.3.0 Compromised: From Prompt Injection to Unauthorized npm Publishoriginal ↗
18 Feb 2026
Why We Built a Hosted MCP Server to Stop Malicious Packages for AI Agentsoriginal ↗
16 Feb 2026
End-to-End test with Nextjs, Playwright and MSWoriginal ↗
3 Feb 2026
Agent Skills Threat Modeloriginal ↗
23 Jan 2026

2025

The State of MCP Registriesoriginal ↗
20 Dec 2025
DarkGPT: Malicious Visual Studio Code Extension Targeting Developersoriginal ↗
10 Dec 2025
Unpacking CVE-2025-55182: React Server Components RCE Exploit Deep Dive and SBOM-Driven Identificationoriginal ↗
4 Dec 2025
Next