Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
AI Coding Agents Hijacked via Malicious AGENTS.md File — Detection and Mitigation Guide
Introduction Security researchers recently discovered a novel attack technique targeting AI coding agents: a malicious AGENTS.md file placed...
Compromised MemTensor npm and PyPI Packages Deliver sckit Credential Stealer — Detection and Remediation Guide
Supply Chain Compromise of MemTensor Packages: What Defenders Need to Know Now Unknown threat actors have compromised two legitimate MemTens...
Malicious npm Packages Evade Install-Script Defenses at Runtime: Detection and Hardening Guide
Introduction A live, ongoing malicious software campaign on the npm registry is demonstrating an evolution in supply-chain tradecraft that d...
CVE-2026-93606: Critical vm2 Sandbox Escape (CVSS 10) — Detection and Remediation Guide
Introduction The National Vulnerability Database has published CVE-2026-93606, a CVSS 10.0 (CRITICAL) vulnerability in vm2, the widely deplo...
ChainDrop Supply Chain Attack: Detecting the Self-Propagating NPM Worm
ChainDrop Supply Chain Attack: Detecting the Self-Propagating NPM Worm Introduction On August 4, 2026, Microsoft released a detailed analysi...
Keyv npm Worm: Detection & Remediation for Supply Chain IDE Hooks
Introduction On August 4, 2026, the JavaScript ecosystem faced a significant supply chain disruption involving a malicious worm linked to th...
ChainDrop npm Supply-Chain Attack: Detection, IOCs, and Remediation Strategies
Introduction The npm ecosystem is currently facing a significant security event with the emergence of 'ChainDrop,' a self-propagating malwar...
Supply Chain Attack: Detecting and Mitigating Hijacked keyv and cacheable npm Packages
Introduction Wiz Research is actively investigating a critical software supply chain attack affecting multiple packages within the keyv and ...
Supply Chain Attack: Cross-Platform RAT via Malicious npm Packages Targeting Alibaba Tools
Supply Chain Attack: Cross-Platform RAT via Malicious npm Packages Targeting Alibaba Tools Introduction Security Arsenal is tracking an acti...