Blogs

Sha1-Hulud: The Second Coming of the NPM Worm is Digging For Secrets

Semgrep

In September incident responders were inundated with breaches all resulting from the npm supply chain.

Visit Site

Secrets Story: The Prefixed Secrets That Tried%20to%2BGet\nAwaySemgrep London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Benchmarking Semgrep Community Edition Performance ImprovementsSemgrep Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep Intel Unveils Next Generation Neuromorphic Computing ChipThenewstack Pulumi ESC and External Secrets Operator: The Perfect Solution for TodayPulumi How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi Pushing Pulumi ESC Secrets into External PlatformsPulumi Accelerating GPT-5.6 Sol UltrafastCerebras From ASR to CSR: Why Conversation Changes EverythingDeepgram Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket upm Launches as a Fast, Tiny Package Manager Written in TypeScriptSocket Happy Birthday, Shai-HuludSocket Memory snapshots: Checkpoint/restore for sub-second startupModal GPU Memory Snapshots: Supercharging sub-second startupModal Cerebras Is Coming to AWS Bedrock for Fast AI InferenceCerebras Gemma 4 on Cerebras—The Fastest Inference is Now MultimodalCerebras Protecting Secrets with DockerDocker