Mini Shai-Hulud Resurfaces; Compromised Maintainer of antv, timeago, and size-sensor Packages
Malicious packages discovered on NPM started with a compromised maintainer account and spread from @antv/*, timeago, size-sensor, and hundreds more.
London calling: Highlights from the 2025 cloud & cyber security expoSemgrep
Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep
Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep
Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep
Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep
Godoc: documenting Go code - The Go Programming LanguageGo
Go.dev: a new hub for Go developers - The Go Programming LanguageGo
Managing dependencies - The Go Programming LanguageGo
Understanding Redis Enterprise Software Support PackagesRedis
Introducing Dependency Divergence GitHub ActionSocket
Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket
Happy Birthday, Shai-HuludSocket
GlassWorm Loader Hits Open VSX via Developer Account CompromiseSocket
Neal.fun | CSS-TricksCss Tricks
How BunnyCDN shredded the size of your text files by 10-20% with BrotliBunny
NEXTJS_MISSING_MODULARIZE_IMPORTSVercel
Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation CampaignSocket
How to Protect Your Projects from the Risks of Deprecated npm PackagesSocket
When "Everything" Becomes Too Much: The npm Package Chaos of 2024Socket
