Shai Hulud

GitGuardian research into infostealing campaigns such as Shai Hulud found that more than 10 valid plaintext credentials were exfiltrated from over 44% of developer laptops, underscoring the exposure c…

A self-propagating npm worm called ChainDrop compromised 444 packages, including keyv (600M monthly downloads), flat-cache, and file-entry-cache, on August 4, 2026, spreading in under four hours and e…

A security researcher disclosed a design flaw in GitHub's commit verification system that allows attackers to spoof verified commits by exploiting a mismatch between the author and committer fields. G…