Rust Crates arrayref & append-only-vec Compromised
Popular Rust crates arrayref and append-only-vec were compromised via a typosquatted proc-macro1 dependency that runs malicious code at build time.
London calling: Highlights from the 2025 cloud & cyber security expoSemgrep
Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep
Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep
Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep
Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep
From Gatekeepers to Guardrails: Automating Your PCI DSS v4.0.1 StrategySemgrep
You can just ship agentsVercel
Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket
GlassWorm Loader Hits Open VSX via Developer Account CompromiseSocket
CSS-Only Marquee EffectCss Tricks
Should DevTools teach the CSS cascade?Css Tricks
Vercel Data Cache: A progressive cache, integrated with Next.jsVercel
Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation CampaignSocket
PolinRider Spreads Through Compromised GitHub Accounts and PackagistSocket
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain AttackSocket
Re-Enabled GitHub Actions Expose Thousands of Repositories to Mini Shai-HuludSocket
Documentation - JS Projects Utilizing TypeScriptTypescriptlang
Retool MCP vs. CLI: When to Use Each Building SurfaceRetool
Progressive enhancement - GlossaryDeveloper Mozilla
SPA (Single-page application) - GlossaryDeveloper Mozilla
