On August 4, 2026, a malicious commit to the npm package 'keyv' triggered a supply-chain worm that compromised over 400 packages (Elastic) or over 1,300 package versions (Singapore's CSA), totaling mo…
The AI cybersecurity arms race is being won by attackers, with Sysdig documenting JADEPUFFER in July 2026 as the first fully autonomous AI-driven ransomware attack, and Unit 42 at Palo Alto Networks u…
A new LeadDev survey finds that 81% of engineering teams give AI-coding agents write access to code repositories, while only 7% keep them read-only, and nearly a quarter reuse human credentials for ag…
Public software registries such as npm and PyPI are converging on trust machinery—trusted publishing, short-lived credentials, and provenance—in response to a wave of supply chain attacks, including t…
A self-propagating malware strain called Sandworm_Mode is targeting AI coding assistants and software development environments, stealing credentials, API keys, and secrets across the AI toolchain, acc…
A threat actor breached AI music generator Suno by compromising a single employee with the Shai-Hulud worm, then used harvested GitHub and cloud credentials to access the company's source code, custom…
TypeScript developers face increased risk from malicious npm packages, with the Shai-Hulud 2.0 attack in November backdooring 796 packages totaling over 20 million weekly downloads and the Mini Shai-H…
Airgap, a new Linux tool, wraps programs in namespaces to hide secrets from AI agents and block npm malware that steals credentials at install time. It redacts sensitive files like .env and SSH keys f…
Malware named Shai-Hulud has been discovered embedded in malicious versions of the Red Hat npm package, with the compromised packages downloaded approximately 80,000 times per week. The supply chain a…
The Shai-Hulud, a self-replicating AI worm that spreads through LLM-powered systems by embedding adversarial prompts in external content, has had its source code publicly released. This development lo…
The PyTorch Lightning deep-learning framework was compromised on PyPI, with versions 2.6.2 and 2.6.3 containing a credential-stealing worm called Shai-Hulud. The malware activates when Python code run…