Insights & Analysis

Expert perspectives on application security, compliance, and emerging threats

All Teams759 Security Engineers759 Compliance Teams223 DevOps Leaders63 Developers31 CISOs17 IT Directors2

Topics:All759 Incident707 General188 Standards88 Research61 Guides34 Deadlines11 Vendor News4 Legal2

759 articles in Security Engineers · Clear filtersSort byNewest·Trending

ESLint Prettier Maintainer Phishing: What Failed

Incident

Latest

4 min read

ESLint Prettier Maintainer Phishing: What Failed

On July 19th, 2024, maintainers of eslint-config-prettier discovered their package had been compromised. Attackers published malicious versions containing credential-stealing malware. With 30,000,000

For Security EngineersRead article

npm Maintainer Breach: Phishing to Package Poisoning

Incident

4 min read

npm Maintainer Breach: Phishing to Package Poisoning

On September 8th, an attacker compromised the npm account of ~qix, a prolific open source maintainer, through a phishing attack. The attacker injected malicious code into widely-used npm packages, red

For Security EngineersRead

18,000 NPM Packages Published in 48 Hours

Incident

4 min read

18,000 NPM Packages Published in 48 Hours

What Happened In November 2025, researchers detected a surge in NPM package publications. Thousands of packages appeared within a 48-hour period, all following similar naming patterns and structural t

For Security EngineersRead

Incident

5 min read

3,000 npm Packages Poisoned in 48 Hours

What Happened On September 15, 2025, attackers published malicious versions of ngx-bootstrap and ng2-file-upload to the npm registry. These compromised packages were designed to exfiltrate cloud crede

For Security EngineersRead

Newsletter

Stay Ahead of Threats

Get weekly security insights and compliance updates delivered to your inbox.

Subscribe Now

Detecting Email Exfiltration in Your Package Dependencies

General

5 min read

Detecting Email Exfiltration in Your Package Dependencies

Scope This guide focuses on detecting and responding to supply chain attacks targeting email transmission libraries. You ll learn to identify BCC-based exfiltration backdoors in npm packages, implemen

For Security EngineersRead

Worm Turns CI Pipelines Into Attack Infrastructure

Incident

4 min read

Worm Turns CI Pipelines Into Attack Infrastructure

What Happened Between late 2024 and early 2025, a worm named SHA1-Hulud infiltrated the npm ecosystem through trojanized packages with hidden preinstall scripts. Snyk identified over 600 compromised n

For Security EngineersRead

34 Malicious Packages, 384 Versions: TrapDoor Teardown

Incident

4 min read

34 Malicious Packages, 384 Versions: TrapDoor Teardown

What Happened On May 22, 2026, at 8:20 p.m. UTC, attackers launched a coordinated supply chain attack across three major package registries. The TrapDoor operation deployed 34 malicious packages spann

For Security EngineersRead

Incident

5 min read

When Agent Sprawl Takes Down Production

Your fraud detection system just made 847 LLM calls to process a single transaction. The request timed out. Your observability dashboard shows nothing unusual. Welcome to multi-agent system failure in

For Security EngineersRead

700 Ghost CMS Sites Hijacked Through SQL Injection

Incident

4 min read

700 Ghost CMS Sites Hijacked Through SQL Injection

Over 700 websites using Ghost CMS were compromised in February and March 2026 due to CVE-2026-26980, a critical SQL injection vulnerability in the platform s Content API. Attackers exploited this flaw

For Security EngineersRead

AI Vulnerability Scanner Missed Critical Access Controls

Incident

4 min read

AI Vulnerability Scanner Missed Critical Access Controls

Overview of the Issue This analysis explores the pitfalls when security teams deploy AI-powered vulnerability scanners without understanding their limitations. OpenHack, an MIT-licensed tool by Hadria

For Security EngineersRead

Server-Side Execution via HTTP Body: The React Deserialization Flaw

Incident

4 min read

Server-Side Execution via HTTP Body: The React Deserialization Flaw

What Happened CVE-2025-55182 enables unauthenticated remote code execution through unsafe deserialization in React Server Components (RSC). Security researcher Lachlan Davidson reported the vulnerabil

For Security EngineersRead

Incident

4 min read

When CI Catches What Your IDE Missed

The Challenge of AI-Accelerated Development Your development team is moving fast with tools like GitHub Copilot or Cursor, shipping features in hours instead of days. However, this speed comes with ri

For Security EngineersRead

npm Maintainer Accounts Hijacked: What Staged Publishing Fixes

Incident

4 min read

npm Maintainer Accounts Hijacked: What Staged Publishing Fixes

What Happened Between 2021 and 2024, attackers compromised multiple npm maintainer accounts to inject malicious code into legitimate packages. They gained access through credential stuffing, phishing,

For Security EngineersRead

Malware in @vietmoney/react-big-calendar: A Supply Chain Failure

Incident

3 min read

Malware in @vietmoney/react-big-calendar: A Supply Chain Failure

What Happened On December 29, 2025, malware was discovered in the @vietmoney/react-big-calendar npm package (version 0.26.2). This malware, called Shai-Hulud 3.0, targeted software supply chains durin

For Security EngineersRead

Incident

4 min read

Trust Wallet Lost $8.5M in 48 Hours

What Happened In a supply chain attack on Trust Wallet , attackers registered a typosquatted domain mimicking the legitimate Trust Wallet site. This malicious domain was embedded in third-party script

For Security EngineersRead

700 Package Versions Poisoned Through Git Tag Manipulation

Incident

5 min read

700 Package Versions Poisoned Through Git Tag Manipulation

On December 16, 2024, attackers compromised the Laravel Lang localization package ecosystem by rewriting GitHub version tags to point at malicious commits in their own forks. The attack affected 233 v

For Security EngineersRead

Showing 449-464 of 759 articles

PreviousPage 29 of 48Next