Malicious Intercom PHP Package Spreads Mini Shai-Hulud Attack to Packagist via Composer Plugin
intercom/intercom-php 5.0.2 was compromised and converted into a Composer plugin that exfiltrates credentials at install time, extending the Mini Shai-Hulud campaign to PHP.
Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep
Sha1-Hulud: The Second Coming of the NPM Worm is Digging For SecretsSemgrep
London calling: Highlights from the 2025 cloud & cyber security expoSemgrep
Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep
Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep
Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep
Calling Your Video Game With Your Phone: Part 1Deepgram
How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi
Go Concurrency Patterns: Context - The Go Programming LanguageGo
Build Your Own PluginVercel
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI AttackSocket
Introducing Dependency Divergence GitHub ActionSocket
Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket
upm Launches as a Fast, Tiny Package Manager Written in TypeScriptSocket
Happy Birthday, Shai-HuludSocket
GlassWorm Loader Hits Open VSX via Developer Account CompromiseSocket
Next-level IaC: Powering Up Pulumi with Package EcosystemsPulumi
This Month in the DuckDB Ecosystem: January 2026Motherduck
JS plain objects compiler pluginKotlinlang
Troubleshooting Python automatic instrumentation issuesOpentelemetry
