Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Laravel-Lang Supply Chain Attack: Detecting and Remediating Malicious Credential Stealer Packages
Laravel-Lang Supply Chain Attack: Detecting and Remediating Malicious Credential Stealer Packages Introduction The open-source ecosystem fac...
Packagist Supply Chain Attack: Detecting Malicious Linux Binaries via package.
Introduction Security researchers at Socket have uncovered a coordinated supply chain campaign targeting the Packagist repository, the prima...
npm Staged Publishing: Hardening the Software Supply Chain with 2FA-Gated Releases
Introduction GitHub has officially released Staged Publishing for the npm registry, a critical control designed to sever the attack chain us...
Malicious Nx Console VS Code Extension: Detection, Credential Theft, and Remediation
Malicious Nx Console VS Code Extension: Detection, Credential Theft, and Remediation Introduction A critical supply chain attack has comprom...
TeamPCP Mini Shai-Hulud: Detection and Remediation for npm and PyPI Supply Chain Worm
Introduction Between September 2025 and May 2026, the threat actor group TeamPCP executed a sophisticated supply chain attack dubbed "Mini S...
TanStack npm Supply Chain Attack: Detecting Nx Console Compromise & GitHub Token Theft
Introduction GitHub has confirmed that the breach of 3,800 internal source code repositories was the direct result of a sophisticated supply...
Lazarus & WageMole Infostealer Surge: ClickFix, Supply Chain, and Steganography Tactics — OTX Pulse Analysis
Lazarus & WageMole Infostealer Surge: ClickFix, Supply Chain, and Steganography Tactics Threat Summary Recent OTX pulses indicate a converge...
GitHub Breach via Malicious Nx Console VS Code Extension: Detection & Hardening
GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension: Detection and Remediation Introduction On Wednesday, GitHu...
Void Dokkaebi Supply Chain Poisoning & Fox Tempest MSaaS: OTX Pulse Analysis
Threat Summary The latest OTX pulses indicate a convergence of sophisticated supply chain attacks and evasion techniques. The Void Dokkaebi ...