Blogs

It’s not npm-ver yet: NPM worm Chaindrop hits 400+ packages including jaredwray, servicetitan

Semgrep

A self-propagating npm worm ChainDrop republished 1,557 poisoned versions across 435 packages and many unrelated maintainer scopes in a two-hour burst.

Visit Site

Sha1-Hulud: The Second Coming of the NPM Worm is Digging For SecretsSemgrep London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep The Best Video Editing Software in 2026 (Including Free Options)Zapier Grafana Is Not Worried About AWS CommercializationThenewstack OData or GraphQL? The Best Tech for Developing an API Is Neither or Both!Thenewstack Explore and Visualize Data the Apache Superset WayThenewstack Inside the Go Playground - The Go Programming LanguageGo Godoc: documenting Go code - The Go Programming LanguageGo Go.dev: a new hub for Go developers - The Go Programming LanguageGo Managing dependencies - The Go Programming LanguageGo Cerebras Systems Enables GPU-Impossible™ Long Sequence Lengths Improving Accuracy in NaturalCerebras Docker Desktop 4.23: Updates to Docker Init, New Configuration Integrity Check, Quick SearchDocker Capturing Logs in Docker DesktopDocker Docker Networking Drivers - Details and Use CasesDocker 12 Best Uberduck Alternatives for AI Text-to-Speech GenerationHeygen The Anatomy of shadcn/ui ComponentsVercel