Search: “slsa”

11 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 28 Malware 11 Exploit / PoC 6 Policy & legal 6 Data breach 3 Industry 3 AI tools & infra 2 Threat actor 1 Tools 1 AI safety & security 1

SeverityAll critical 24 high 32 medium 2 low 1 info 3

Miasma Worm Compromises 73 Microsoft GitHub Repositories

Security AffairsJun 9, 16:08 UTC · Jun 9, 2026Malware1

42

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

The Hacker NewsAug 4, 15:03 UTC · Aug 4, 2026Malware1

42

145 Mastra npm Packages Compromised via Hijacked Contributor Account

The Hacker NewsJun 22, 05:41 UTC · Jun 22, 2026Malware

42

For the 2nd time in weeks, Microsoft packages laced with credential stealer

Ars Technica · SecurityJun 8, 18:34 UTC · Jun 8, 2026Malware

42

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

The Hacker NewsMay 25, 09:00 UTC · May 25, 2026Malware1

42

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

The Hacker NewsMay 21, 05:56 UTC · May 21, 2026Malware

42

OpenAI hit by supply chain attack linked to malicious TanStack packages

Security AffairsMay 16, 09:31 UTC · May 16, 2026Malware

42

Python Supply-Chain Compromise

Schneier on SecurityApr 8, 12:22 UTC · Apr 8, 2026Malware

55

Chainguard Libraries for JavaScript provides developers with malware-free dependencies

Help Net SecuritySep 25, 00:00 UTC · Sep 25, 2025Malware

42

North Korean Hackers Use Trojanized 3CX DesktopApp in Supply Chain Attacks

Infosecurity MagazineMar 30, 17:30 UTC · Mar 30, 2023Malware

55

Here's a New Tool That Scans Open-Source Repositories for Malicious Packages

The Hacker NewsMay 3, 03:59 UTC · May 3, 2022Malware

42