Blogs

Forking Shai-Hulud: RedHat npm Packages Are The Next Victim After GitHub Actions Compromise and Worm

Semgrep

RedHat becomes the latest victim of an npm worm after a breach affected numerous packages in the @redhat-cloud-services npm organization.

Visit Site

Sha1-Hulud: The Second Coming of the NPM Worm is Digging For SecretsSemgrep London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep Trigger automation - MintlifyMintlify Trained on 100,000+ Voices: Deepgram Unveils Next-Gen Speaker Diarization and Language DetectionDeepgram Q&A with Deepgram’s New CPO, Ed AnuffDeepgram Looping by Zapier: Repeat actions for itemsZapier Intel Unveils Next Generation Neuromorphic Computing ChipThenewstack Integrate Jupyter Notebooks with GitHubThenewstack Pulumi Neo Now Supports AGENTS.mdPulumi Godoc: documenting Go code - The Go Programming LanguageGo Go.dev: a new hub for Go developers - The Go Programming LanguageGo Managing dependencies - The Go Programming LanguageGo How AI Assistants Can Decode GitHub Repos for UI WritersDocker Creating an AI Summary App with Next.js | Vercel AcademyVercel Config and Secret environment variablesVercel AGENTS.md outperforms skills in our agent evalsVercel