Blogs

Miasma v2: Self-Spreading npm Worm Now Uses Malicious binding.gyp file and Compromises 57 Packages

Semgrep

Two days later, and Miasma already has a new version. The self-spreading npm worm that first surfaced earlier this week didn't give the creators the results they were expecting.

Visit Site

Sha1-Hulud: The Second Coming of the NPM Worm is Digging For SecretsSemgrep Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep Cloud Security Trends & Challenges: Complete GuideCybersecurity Exchange The Language of LGBTQ Inclusion and Allyship - Deepgram Blog ⚡️Deepgram No Code Transcription: Simplifying Workflows with Deepgram and Make.comDeepgram How CoverDoc uses AI to revolutionize cover letter writingZapier From Automation Veteran to AI Pioneer: How Evan Nison transformed his agency with Zapier MCPZapier Grafana Is Not Worried About AWS CommercializationThenewstack DevSecOps: Why Security Shouldn’t be Sacrificed for SpeedThenewstack Pulumi ESC Table Editor Now Supports Dynamic Credential and Secret IntegrationsPulumi Discovered Stacks: One Place for All Your InfrastructurePulumi Pulumi Neo Now Supports AGENTS.mdPulumi New Policy as Code Capabilities with CrossGuardPulumi Supporting Kubernetes with Faster, Easier Test EnvironmentsPulumi Godoc: documenting Go code - The Go Programming LanguageGo Go.dev: a new hub for Go developers - The Go Programming LanguageGo