Not Your IPC, but node-ipc: npm Hit Again with Supply Chain Attack (But This Time It's Not a Worm)
Newly published versions of the node-ipc npm package briefly contained an obfuscated infostealer that harvested developer credentials, cloud tokens, SSH keys, CI/CD secrets, and local configuration files before attempting DNS-based exfiltration.
Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep
Detect Open Source Malware Attacks with Semgrep Supply ChainSemgrep
Sha1-Hulud: The Second Coming of the NPM Worm is Digging For SecretsSemgrep
How we built an AppSec AI that security researchers agree with 96% of the timeSemgrep
London calling: Highlights from the 2025 cloud & cyber security expoSemgrep
Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep
Trigger automation - MintlifyMintlify
Breaking down common documentation mistakesMintlify
5 Reasons to Keep Contributing to Open-Source Projects - Deepgram Blog ⚡️Deepgram
Let’s Play Master and Servant: Real Time Synchronization Tool for Redis MigrationRedis
Grafana Is Not Worried About AWS CommercializationThenewstack
OData or GraphQL? The Best Tech for Developing an API Is Neither or Both!Thenewstack
Flockport: Time to Start All Over Again and Return to LXC ContainersThenewstack
Announcing the New Pulumi Partner ProgramPulumi
Pulumi ESC and External Secrets Operator: The Perfect Solution for TodayPulumi
How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi
Inside the Go Playground - The Go Programming LanguageGo
What is a CUDA Thread Block?Modal
Position Sticky and Table HeadersCss Tricks
Server-Side React RenderingCss Tricks
