Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
npm Staged Publishing: Hardening the Software Supply Chain with 2FA-Gated Releases
Introduction GitHub has officially released Staged Publishing for the npm registry, a critical control designed to sever the attack chain us...
Malicious Nx Console VS Code Extension: Detection, Credential Theft, and Remediation
Malicious Nx Console VS Code Extension: Detection, Credential Theft, and Remediation Introduction A critical supply chain attack has comprom...
TeamPCP Mini Shai-Hulud: Detection and Remediation for npm and PyPI Supply Chain Worm
Introduction Between September 2025 and May 2026, the threat actor group TeamPCP executed a sophisticated supply chain attack dubbed "Mini S...
TanStack npm Supply Chain Attack: Detecting Nx Console Compromise & GitHub Token Theft
Introduction GitHub has confirmed that the breach of 3,800 internal source code repositories was the direct result of a sophisticated supply...
Lazarus & WageMole Infostealer Surge: ClickFix, Supply Chain, and Steganography Tactics — OTX Pulse Analysis
Lazarus & WageMole Infostealer Surge: ClickFix, Supply Chain, and Steganography Tactics Threat Summary Recent OTX pulses indicate a converge...
GitHub Breach via Malicious Nx Console VS Code Extension: Detection & Hardening
GitHub Internal Repositories Breached via Malicious Nx Console VS Code Extension: Detection and Remediation Introduction On Wednesday, GitHu...
Void Dokkaebi Supply Chain Poisoning & Fox Tempest MSaaS: OTX Pulse Analysis
Threat Summary The latest OTX pulses indicate a convergence of sophisticated supply chain attacks and evasion techniques. The Void Dokkaebi ...
Vidar v1.5, Gremlin & Void Dokkaebi: Cross-Platform Credential Harvesting & Supply Chain Threats — OTX Pulse Analysis
Threat Summary Intelligence from OTX pulses dated 2026-05-21 indicates a surge in sophisticated credential theft and infrastructure hijackin...
Grafana GitHub Source Code Exfiltration via TanStack npm Supply Chain Attack — IR Guide
Introduction On May 19, 2026, Grafana Labs disclosed a significant security incident confirming that their GitHub environment was breached, ...