Blogs

Children of Shai-Hulud: An Analysis of the The Evolution, Delivery and Spread of the TanStack

Semgrep

The latest Shai-Hulud malware campaign weaponizes GitHub Actions, poisoned caches, IDE hooks, and dynamic infrastructure to spread across software supply chains while stealing cloud, AI, crypto, and developer credentials at scale.

Visit Site

Finding More Zero Days Through Variant AnalysisSemgrep Sha1-Hulud: The Second Coming of the NPM Worm is Digging For SecretsSemgrep London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep A Guide to Extended Threat Detection and Response: What It Is and How to Choose the Best SolutionsCybersecurity Exchange Mintlify Alternatives: What to Consider (and Why There's No True Substitute)Mintlify Who Explains the Most? An Analysis of Educational YouTubers - Deepgram Blog ⚡️Deepgram When CI Meets CD: Deliver With ConfidenceThenewstack How a top tier European soccer team sped up their data processing and reduced costs by 50%Modal It's Ducking Easy: From Zero to Insight with MotherDuck and dbtMotherduck Supporting the jsDelivr open source CDN with bandwidth for developersBunny Validate Drain delivery configuration | Vercel REST APIVercel Best Documentation Platforms for AI Agents in 2026Mintlify From Hawking to Siri: The Evolution of Speech SynthesisDeepgram How to Build Real-Time Sentiment Analysis for Streaming AudioDeepgram How Walsall Council Delivers Improved Resident Experiences Through Multilingual AI Videos in Over 50Synthesia Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket Comparing Reachability Analysis ProvidersSocket