Install
Please confirm you are human
This browser or connection looks automated. Press and continuously hold the control for 3 seconds to enable Google-hosted web results and, when separately allowed, AI-assisted answers.
A successful check enables 100 search requests. Interactive access does not authorize scraping, systematic collection, or reuse of search output.
News
Shai-Hulud npm worm resurfaces, bypassing security scans
3+ day, 12+ hour ago (80+ words) As outlined in IT Pro, the Shai-Hulud npm worm, previously thought to be neutralized, has reappeared in a new campaign that successfully bypassed npm's recently implemented security measures. The targeted entities are developers and organizations relying on the npm registry…...
Mythos vs. Reality: Zero-Day Defense for 2026 Supply Chains
3+ day, 16+ hour ago (251+ words) ReversingLabs Spectra Assure Free Trial Get your 14-day free trial of Spectra Assure for Software Supply Chain Security Mythos vs. Reality: Zero-Day Defense for 2026 Supply Chains Frontier‑scale AI is rapidly redefining how organizations confront zero‑day threats buried deep…...
We Analyzed a Malicious PyPl Package Targeting Developers
4+ day, 1+ hour ago (196+ words) A developer runs pip install. Nothing crashes. No ransomware appears. No antivirus alert fires. Thirty seconds later, a Python process makes an outbound connection to infrastructure nobody on the team recognizes. Recent 2026 incidents show how quickly this can become a…...
npm Supply Chain Worm Returns After Four-Month Dormancy With Same Malicious Payload
5+ day, 5+ hour ago (330+ words) A previously documented Shai-Hulud npm supply-chain worm payload has reportedly reappeared after 111 days of inactivity, using the exact same malicious file linked to the May 19 compromise of hundreds of @AntV package versions. The reactivation raises concerns about registry-level malware detection…...
Shai-Hulud Malware Returns to npm Unchanged, 111 Days After Its Hash Was Fingerprinted
5+ day, 2+ hour ago (507+ words) Four packages is a small blast radius next to the 639 malicious versions pushed during the May campaign. The significance sits elsewhere. npm rolled out publish-time scanning in July, a control that briefly holds new publications for automated analysis before they…...
How to Generate an SBOM: 12 Steps, 90 Min [2026]
5+ day, 14+ hour ago (1662+ words) This tutorial walks through generating, validating, and operationalizing SBOMs using the same open-source tools that dominate the space right now: Syft, Grype, Trivy, and Dependency-Track. By the end you will have a working pipeline that produces a CycloneDX or SPDX…...
A Shai-Hulud npm payload came back 111 days later
5+ day, 22+ hour ago (396+ words) Advanced AppSec suite, built for devs. in-app runtime defense and threat detection. Real-time malware & vuln threats Since then, npm has introduced publish-time malware scanning. So you can imagine my surprise when I was going through our triage queue this morning…...
Security Model
6+ day, 11+ hour ago (143+ words) Threat model, guard middleware, PII handling, provenance and the red-team suite. OpenSmartRoute is an LLM control plane: it decides who answers. That makes its integrity a security property in its own right (Shafran et al., "Rerouting LLM Routers", 2025). This document…...
Active Exploitation Alert: North Korean APTs Deploy Ted Backdoor in Compromised HAProxy Builds to Hijack Web Traffic
1+ week, 1+ hour ago (517+ words) Rescana Active Exploitation Alert: North Korean APTs Deploy Ted Backdoor in Compromised HAProxy Builds to Hijack Web Traffic Technical Analysis of Malware/TTPs The Ted backdoor is not a vulnerability in the official HAProxy codebase, but rather a malicious plugin…...
HookAudit: Building a Supply-Chain Security Scanner Without a Supply Chain
1+ week, 16+ hour ago (1185+ words) What happens when you force a security tool to inspect untrusted code using only standard-library... Tagged with opensource, node, security, javascript....