The Curious Engineer

All blogs / Security

SafeDep’s Blog

safedep.io

SafeDep helps teams detect malicious packages, protect AI agents, and govern open source risk across developer machines, CI/CD pipelines, and production workflows.

SecurityDevOps / SRE / infrastructure

’24’25’26
Posts
324 from 15 Sep 2024 to 4 Nov 2026
Posting
about daily (241 in the last year)
Kind
company blog
Feed
https://safedep.io/rss.xml

2026 232

  1. Binance Hack Lessons: Sandbox the Take-Home Assignment
  2. Binance Hack: How Attackers Stole $6.34 Billion Through Developer Laptops
  3. antd-img-crop GitHub Repository Hijacked to Deliver OverLord Stealer
  4. October 2026 Security Incident Review: PHP, Binance, Cursor, LiteLLM and More
  5. October 2026 Security Incident Review: PHP, Binance, Cursor, LiteLLM and More
  6. eMudhra CA Key Compromise: Response Guide for Developers
  7. testmetest npm Packages Carry a Miasma-Family Worm
  8. SCA & SBOM Scan dependencies, generate SBOMs, enforce policy.
  9. AI Agent Discovery See every AI tool and SDK in your org.
  10. AI Agent Monitoring Audit every action your AI agents take.
  11. Developer Security Block malicious packages at install-time.
  12. CI/CD Security Block malicious packages in your pipeline.
  13. MCP Server Block threats inside your AI coding agent.
  14. Agent API Threat intelligence API for custom agents.
  15. Threat Intelligence Real-time malicious package verdicts.
  16. Endpoint Protection Package events & AI inventory in the cloud.
  17. Platform Centralized policies, dashboard, compliance.
  18. Book a Demo
  19. Terms
  20. Pricing
  21. How it works
  22. Open Source Program
  23. Threat Intel Data Hub
  24. Faq
  25. testmetest npm Packages Carry a Miasma-Family Worm
  26. eMudhra CA Key Compromise: Response Guide for Developers
  27. Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
  28. Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
  29. Forged Commits Push a preinstall Dropper into hugo-paper and mevn-cli
  30. Forged Commits Push a preinstall Dropper into hugo-paper and mevn-cli
  31. MALFEX Moves Its npm Loader into a Native Windows DLL
  32. MALFEX Moves Its npm Loader into a Native Windows DLL
  33. ASOS App Hack: Attackers Used Push Notifications to Send a Ransom Note
  34. ASOS App Hack: Attackers Used Push Notifications to Send a Ransom Note
  35. tensorlake 0.5.144 npm Compromise Ships Mini Shai-Hulud
  36. tensorlake 0.5.144 npm Compromise Ships Mini Shai-Hulud
  37. 42 Malicious RubyGems Open a Reverse Shell at Install Time
  38. 42 Malicious RubyGems Open a Reverse Shell at Install Time
  39. An Attacker Hijacked an AI Coding Assistant to Spread a Worm
  40. An Attacker Hijacked an AI Coding Assistant to Spread a Worm
  41. PolinRider Switches to Ethereum C2 in 30+ Repositories
  42. PolinRider Switches to Ethereum C2 in 30+ Repositories
  43. DirtyBlanket: Fake Express Packages on npm Spread a Linux Worm
  44. DirtyBlanket: Fake Express Packages on npm Spread a Linux Worm
  45. Detecting Compromised AI Coding Agents with Jev and Gryph
  46. Detecting Compromised AI Coding Agents with Jev and Gryph
  47. Mini Shai-Hulud Is Still Infecting GitHub Repositories
  48. Mini Shai-Hulud Is Still Infecting GitHub Repositories
  49. MemTensor npm and PyPI Packages Hit by a Go Worm
  50. sckit: A New Go Implant Framework for Supply Chain Worms
  51. MemTensor npm and PyPI Packages Hit by a Go Worm
  52. sckit: A New Go Implant Framework for Supply Chain Worms
  53. OpenAI Agents Turned RubyGems Into a Scraping Proxy
  54. OpenAI Agents Turned RubyGems Into a Scraping Proxy
  55. Why Does an npm Math Library Need an Encrypted Loader?
  56. Why Does an npm Math Library Need an Encrypted Loader?
  57. The Agentic IDE Extension Blind Spot
  58. The Agentic IDE Extension Blind Spot
  59. Deep-Live-Cam Supply Chain Attack: Technical Analysis
  60. Deep-Live-Cam Supply Chain Attack: Technical Analysis
  61. Introducing SafeDep Threat Intel
  62. Introducing SafeDep Threat Intel
  63. A malicious npm package hidden three dependencies deep: the ulid-xyz delivery chain
  64. A malicious npm package hidden three dependencies deep: the ulid-xyz delivery chain
  65. Mini Shai-Hulud Strikes Again: openapi-react-query-codegen
  66. Mini Shai-Hulud Strikes Again: openapi-react-query-codegen
  67. From YouTube Ad to Root: How a Fake TradingView Installer Delivers a macOS Stealer
  68. From YouTube Ad to Root: How a Fake TradingView Installer Delivers a macOS Stealer
  69. Malicious Rust Crate arrayref Runs a Build-Time Payload
  70. Malicious Rust Crate arrayref Runs a Build-Time Payload
  71. npm Bin Entry Harvesting: A Dependency Confusion Blind Spot
  72. npm Bin Entry Harvesting: A Dependency Confusion Blind Spot
  73. Baileys npm forks farm WhatsApp Channel followers
  74. Baileys npm forks farm WhatsApp Channel followers
  75. keyv and cacheable npm compromise: 400+ packages
  76. keyv and cacheable npm compromise: 400+ packages
  77. Joyfill npm Packages Compromised with Blockchain C2 Loader
  78. Joyfill npm Packages Compromised with Blockchain C2 Loader
  79. mrmustard PyPI Package Trojanized to Steal Credentials
  80. mrmustard PyPI Package Trojanized to Steal Credentials
  81. @copilot-mcp/apex: A macOS Infostealer Re-Published on npm After Takedown
  82. @copilot-mcp/apex: A macOS Infostealer Re-Published on npm After Takedown
  83. AsyncAPI Packages Compromised with Miasma RAT
  84. AsyncAPI Packages Compromised with Miasma RAT
  85. Official jscrambler npm Package Compromised Across Multiple Releases
  86. Official jscrambler npm Package Compromised Across Multiple Releases
  87. nodemon-sudo: an npm Backdoor With No Install Script
  88. nodemon-sudo: an npm Backdoor With No Install Script
  89. @marketfront: 25 npm Packages Reuse a Known Lure
  90. @marketfront: 25 npm Packages Reuse a Known Lure
  91. The Polymarket Trap: A Fake Arbitrage Bot, Ten npm Accounts, and Four Ways to Deliver an Infostealer
  92. The Polymarket Trap: A Fake Arbitrage Bot, Ten npm Accounts, and Four Ways to Deliver an Infostealer
  93. Miasma Worm Infects Multiple LeoPlatform npm Packages
  94. Miasma Worm Infects Multiple LeoPlatform npm Packages
  95. The wshu.net npm Campaign Delivers a Multi-Stage Infostealer
  96. The wshu.net npm Campaign Delivers a Multi-Stage Infostealer
  97. MYRA: A Full Linux RAT Distributed via npm
  98. MYRA: A Full Linux RAT Distributed via npm
  99. @withgoogle/stitch-sdk: Scope Squat Harvests Developer Credentials
  100. @withgoogle/stitch-sdk: Scope Squat Harvests Developer Credentials
  101. Five npm Packages That Hide a Windows Binary Dropper
  102. Five npm Packages That Hide a Windows Binary Dropper
  103. Mastra npm Scope Takeover: 143 Packages Drop a RAT
  104. Mastra npm Scope Takeover: 143 Packages Drop a RAT
  105. astro.config.mjs Supply Chain Attack via Blockchain C2
  106. astro.config.mjs Supply Chain Attack via Blockchain C2
  107. Miasma Worm: Most Infected GitHub Repos Are Still Live
  108. Miasma Worm: Most Infected GitHub Repos Are Still Live
  109. Inside the Miasma Software Supply Chain Attack Toolkit
  110. Inside the Miasma Software Supply Chain Attack Toolkit
  111. Config Files That Run Code: Supply Chain Security Blindspot
  112. Config Files That Run Code: Supply Chain Security Blindspot
  113. Miasma Worm Targets AI Coding Agents via GitHub Repos
  114. Miasma Worm Targets AI Coding Agents via GitHub Repos
  115. Axios Typosquats Deliver the Epsilon Stealer
  116. Axios Typosquats Deliver the Epsilon Stealer
  117. Mini Shai-Hulud "Miasma: The Spreading Blight" Hits @redhat-cloud-services: Multiple Packages at Risk
  118. Mini Shai-Hulud "Miasma: The Spreading Blight" Hits @redhat-cloud-services: Multiple Packages at Risk
  119. Inside MicrosoftSystem64: A Supply Chain RAT Exfiltrating to HuggingFace
  120. Inside MicrosoftSystem64: A Supply Chain RAT Exfiltrating to HuggingFace
  121. 183 npm Packages Target Cloud and Finance via oob.moika.tech
  122. 183 npm Packages Target Cloud and Finance via oob.moika.tech
  123. 141 npm Packages Abuse Registry as Adware Hosting
  124. 141 npm Packages Abuse Registry as Adware Hosting
  125. forge-jsxy: 22 Versions of an Actively Developed npm RAT
  126. forge-jsxy: 22 Versions of an Actively Developed npm RAT
  127. Megalodon: Mass GitHub Repo Backdooring via CI Workflows
  128. Megalodon: Mass GitHub Repo Backdooring via CI Workflows
  129. Polymarket npm Packages Steal Crypto Wallet Keys
  130. Polymarket npm Packages Steal Crypto Wallet Keys
  131. art-template npm Hijack Delivers iOS Browser Exploit Kit
  132. art-template npm Hijack Delivers iOS Browser Exploit Kit
  133. Malicious durabletask on PyPI: Multi-Cloud Credential Stealer with Worm Capabilities
  134. Malicious durabletask on PyPI: Multi-Cloud Credential Stealer with Worm Capabilities
  135. Mini Shai-Hulud Strikes Again: 317 npm Packages Compromised
  136. Mini Shai-Hulud Strikes Again: 317 npm Packages Compromised
  137. Compromised node-ipc on npm: Credential Stealer via DNS Exfiltration
  138. Compromised node-ipc on npm: Credential Stealer via DNS Exfiltration
  139. Malicious npm Packages Backdoor Claude Code Sessions
  140. Malicious npm Packages Backdoor Claude Code Sessions
  141. Cache Poisoning Through pull_request_target: The TanStack Incident
  142. Cache Poisoning Through pull_request_target: The TanStack Incident
  143. Mass Supply Chain Attack Hits TanStack, Mistral AI npm and PyPI Packages
  144. Mass Supply Chain Attack Hits TanStack, Mistral AI npm and PyPI Packages
  145. Endpoint Protection for Developer Machines
  146. Endpoint Protection for Developer Machines
  147. noon-contracts npm Package: DeFi Supply Chain RAT
  148. noon-contracts npm Package: DeFi Supply Chain RAT
  149. martinez-polygon-clipping-tony: Trojanized npm Fork Drops Telegram RAT
  150. martinez-polygon-clipping-tony: Trojanized npm Fork Drops Telegram RAT
  151. node-env-resolve: npm Package Installs a Full RAT
  152. node-env-resolve: npm Package Installs a Full RAT
  153. common-tg-service: 502 npm Versions Hijack Telegram
  154. common-tg-service: 502 npm Versions Hijack Telegram
  155. exiouss: Cookie Stealer Bundled in npm Exam Cheat
  156. exiouss: Cookie Stealer Bundled in npm Exam Cheat
  157. PyTorch Lightning Compromised: Shai-Hulud Worm Reaches PyPI
  158. PyTorch Lightning Compromised: Shai-Hulud Worm Reaches PyPI
  159. Mini Shai Hulud and SAP Compromise
  160. Mini Shai Hulud and SAP Compromise
  161. Malicious redeem-onchain-sdk npm Targets Crypto Wallets
  162. Malicious redeem-onchain-sdk npm Targets Crypto Wallets
  163. npm-global-util: Credential Theft and Supply Chain Attack
  164. npm-global-util: Credential Theft and Supply Chain Attack
  165. Bitwarden CLI Supply Chain Compromise
  166. Bitwarden CLI Supply Chain Compromise
  167. Malicious Pull Requests: A Threat Model
  168. Malicious Pull Requests: A Threat Model
  169. ixpresso-core: Windows RAT Disguised as a WhatsApp Agent
  170. PMG dependency cooldown: wait on fresh npm versions
  171. ixpresso-core: Windows RAT Disguised as a WhatsApp Agent
  172. PMG dependency cooldown: wait on fresh npm versions
  173. forge-jsx npm Package: Purpose-Built Multi-Platform RAT
  174. forge-jsx npm Package: Purpose-Built Multi-Platform RAT
  175. Malicious npm Package js-logger-pack Ships a Multi-Platform WebSocket Stealer
  176. Malicious npm Package js-logger-pack Ships a Multi-Platform WebSocket Stealer
  177. Malicious dom-utils-lite npm SSH Backdoor via Supabase
  178. Malicious dom-utils-lite npm SSH Backdoor via Supabase
  179. Malicious npm Dependency Confusion Campaign Targets Genoma UI and Others
  180. Malicious npm Dependency Confusion Campaign Targets Genoma UI and Others
  181. big.js Typosquat Campaign Implants SSH Backdoors
  182. big.js Typosquat Campaign Implants SSH Backdoors
  183. @fairwords npm Packages Hit by Credential Worm
  184. @fairwords npm Packages Hit by Credential Worm
  185. Malicious @velora-dex/sdk Delivers Go RAT via npm
  186. Malicious @velora-dex/sdk Delivers Go RAT via npm
  187. Malicious hermes-px on PyPI Steals AI Conversations
  188. Malicious hermes-px on PyPI Steals AI Conversations
  189. prt-scan: A 5-Phase GitHub Actions Credential Theft Campaign
  190. prt-scan: A 5-Phase GitHub Actions Credential Theft Campaign
  191. Thirty-Six Malicious npm Strapi Packages Deploy Redis RCE, Database Theft, and Persistent C2
  192. Thirty-Six Malicious npm Strapi Packages Deploy Redis RCE, Database Theft, and Persistent C2
  193. Compromised npm Package mgc Deploys Multi-Platform RAT
  194. Compromised npm Package mgc Deploys Multi-Platform RAT
  195. Malicious npm Package express-session-js Drops Full RAT Payload
  196. Malicious npm Package express-session-js Drops Full RAT Payload
  197. axios Compromised: npm Supply Chain Attack via Dependency Injection
  198. axios Compromised: npm Supply Chain Attack via Dependency Injection
  199. Compromised telnyx on PyPI: WAV Steganography and Credential Theft
  200. Compromised telnyx on PyPI: WAV Steganography and Credential Theft
  201. Malicious litellm 1.82.8: Credential Theft and Persistent Backdoor
  202. sl4x0 Dependency Confusion: 92 Packages Target Fortune 500
  203. Malicious litellm 1.82.8: Credential Theft and Persistent Backdoor
  204. sl4x0 Dependency Confusion: 92 Packages Target Fortune 500
  205. Trivy Supply Chain Compromise: What Happened, What Was Stolen, and How to Respond
  206. Trivy Supply Chain Compromise: What Happened, What Was Stolen, and How to Respond
  207. Malicious npm Package react-refresh-update Drops Cross-Platform Trojan on Developer Machines
  208. Malicious npm Package react-refresh-update Drops Cross-Platform Trojan on Developer Machines
  209. How to Write Time-Based Security Policies in SafeDep vet
  210. How to Write Time-Based Security Policies in SafeDep vet
  211. Threat Modeling the AI-Native SDLC: Supply Chain Security in the Age of Coding Agents
  212. Threat Modeling the AI-Native SDLC: Supply Chain Security in the Age of Coding Agents
  213. Malicious npm Package pino-sdk-v2 Exfiltrates Secrets to Discord
  214. Malicious npm Package pino-sdk-v2 Exfiltrates Secrets to Discord
  215. Gryph: Audit Trail for AI Coding Agents
  216. Gryph: Audit Trail for AI Coding Agents
  217. Integrate SafeDep MCP in GitHub Agentic Workflow
  218. Shadow AI Discovery: Find Every AI Tool and SDK in Your Stack
  219. Integrate SafeDep MCP in GitHub Agentic Workflow
  220. Shadow AI Discovery: Find Every AI Tool and SDK in Your Stack
  221. Malicious npm Packages Target Schedaero via Dependency Confusion
  222. Malicious npm Packages Target Schedaero via Dependency Confusion
  223. npm SANDWORM_MODE Attack: Step-by-Step Malware Analysis
  224. npm SANDWORM_MODE Attack: Step-by-Step Malware Analysis
  225. AI Agent Cline v2.3.0 Compromised: From Prompt Injection to Unauthorized npm Publish
  226. AI Agent Cline v2.3.0 Compromised: From Prompt Injection to Unauthorized npm Publish
  227. Why We Built a Hosted MCP Server to Stop Malicious Packages for AI Agents
  228. Why We Built a Hosted MCP Server to Stop Malicious Packages for AI Agents
  229. End-to-End test with Nextjs, Playwright and MSW
  230. End-to-End test with Nextjs, Playwright and MSW
  231. Agent Skills Threat Model
  232. Agent Skills Threat Model

2025 78

  1. The State of MCP Registries
  2. The State of MCP Registries
  3. DarkGPT: Malicious Visual Studio Code Extension Targeting Developers
  4. DarkGPT: Malicious Visual Studio Code Extension Targeting Developers
  5. Unpacking CVE-2025-55182: React Server Components RCE Exploit Deep Dive and SBOM-Driven Identification
  6. Unpacking CVE-2025-55182: React Server Components RCE Exploit Deep Dive and SBOM-Driven Identification
  7. Shai-Hulud 2.0 npm Supply Chain Attack Technical Analysis
  8. Shai-Hulud 2.0 npm Supply Chain Attack Technical Analysis
  9. An Opinionated Approach for Frontend Testing for Startups
  10. An Opinionated Approach for Frontend Testing for Startups
  11. Curious Case of Embedded Executable in a Newly Introduced Transitive Dependency
  12. Curious Case of Embedded Executable in a Newly Introduced Transitive Dependency
  13. Malicious npm Packages Impersonating Hyatt Internal Dependencies
  14. Malicious npm Packages Impersonating Hyatt Internal Dependencies
  15. Contributing to SafeDep Open Source Projects during Hacktoberfest 2025
  16. Contributing to SafeDep Open Source Projects during Hacktoberfest 2025
  17. Ship Code. Not Malware. SafeDep Launches GitHub App for Malicious Package Protection
  18. Ship Code. Not Malware. SafeDep Launches GitHub App for Malicious Package Protection
  19. Shai-Hulud Supply Chain Attack Incident Response
  20. Shai-Hulud Supply Chain Attack Incident Response
  21. Diff-based SCA with AI is Broken — Real Examples from Pipfile.lock, yarn.lock, and Cargo.lock
  22. Diff-based SCA with AI is Broken — Real Examples from Pipfile.lock, yarn.lock, and Cargo.lock
  23. npm Supply Chain Attack Exposes Private Repositories, AWS Credentials and More
  24. npm Supply Chain Attack Exposes Private Repositories, AWS Credentials and More
  25. npm Supply Chain Attack: Multiple Popular Packages Hijacked (1B+ Weekly Downloads)
  26. npm Supply Chain Attack: Multiple Popular Packages Hijacked (1B+ Weekly Downloads)
  27. nx Build System Compromised Targeting Linux and MacOS developers
  28. nx Build System Compromised Targeting Linux and MacOS developers
  29. TensorFlow.js Typosquatting Attack: Malicious Package Targeting AI/ML Developers
  30. Multiple Malicious Python Packages Targeting Bittensor Crypto Developers
  31. TensorFlow.js Typosquatting Attack: Malicious Package Targeting AI/ML Developers
  32. Multiple Malicious Python Packages Targeting Bittensor Crypto Developers
  33. Security Risks in PEP 723 and uv: Inline Metadata Gone Wrong?
  34. Security Risks in PEP 723 and uv: Inline Metadata Gone Wrong?
  35. Secure Vibe Coding with AI Agents
  36. Secure Vibe Coding with AI Agents
  37. eslint-config-prettier Compromised: How npm Package with 30 Million Downloads Spread Malware
  38. eslint-config-prettier Compromised: How npm Package with 30 Million Downloads Spread Malware
  39. SBOM Completeness with Direct & Transitive Dependencies
  40. SBOM Completeness with Direct & Transitive Dependencies
  41. SBOM and the EU Cyber Resilience Act (CRA) – What Software Vendors Need to Know
  42. SBOM and the EU Cyber Resilience Act (CRA) – What Software Vendors Need to Know
  43. Introducing SafeDep Model Context Protocol (MCP) Server to Secure AI Generated Code
  44. Introducing SafeDep Model Context Protocol (MCP) Server to Secure AI Generated Code
  45. License Compliance with SBOM
  46. License Compliance with SBOM
  47. Introducing Container Image Scanning
  48. Introducing Container Image Scanning
  49. Software Bill of Materials: Foundation for Trust in Software Supply Chain
  50. Software Bill of Materials: Foundation for Trust in Software Supply Chain
  51. Catching the Silent Threat: How Dynamic Analysis Revealed a Complex npm Attack Chain
  52. Catching the Silent Threat: How Dynamic Analysis Revealed a Complex npm Attack Chain
  53. Introducing Package Manager Guard (PMG)
  54. Introducing Package Manager Guard (PMG)
  55. Dynamic Malware Analysis of Open Source Packages at Scale
  56. Dynamic Malware Analysis of Open Source Packages at Scale
  57. Malicious npm Package Impersonating Popular Express Cookie Parser
  58. Malicious npm Package Impersonating Popular Express Cookie Parser
  59. Malicious npm Package Impersonating Java SLF4J
  60. Malicious npm Package Impersonating Java SLF4J
  61. Announcing DefectDojo Integration
  62. Announcing DefectDojo Integration
  63. Analysis of 5000+ Malicious Open Source Packages
  64. Analysis of 5000+ Malicious Open Source Packages
  65. 🚀 Introducing GitLab CI/CD Component
  66. 🚀 Introducing GitLab CI/CD Component
  67. Agentic Workflows for Malicious Package Analysis
  68. Agentic Workflows for Malicious Package Analysis
  69. Typosquatt alert ! Malicious npm Package: nyc-config
  70. Typosquatt alert ! Malicious npm Package: nyc-config
  71. Introducing vetpkg.dev - Open Source Component Security Dashboard
  72. Introducing vetpkg.dev - Open Source Component Security Dashboard
  73. Eliminating SCA Noise using Dependency Usage Evidence
  74. Eliminating SCA Noise using Dependency Usage Evidence
  75. What is Next Generation Software Composition Analysis?
  76. What is Next Generation Software Composition Analysis?
  77. Malicious npm Packages using Burp Collaborator for Dependency Confusion Attack
  78. Malicious npm Packages using Burp Collaborator for Dependency Confusion Attack

2024 14

  1. npm - The Playground for Malicious Packages
  2. npm - The Playground for Malicious Packages
  3. Malicious Open Source Library Analysis: llm-oracle and its Payload
  4. Malicious Open Source Library Analysis: llm-oracle and its Payload
  5. How a Security Team use Policy as Code for Open Source Security
  6. How a Security Team use Policy as Code for Open Source Security
  7. SQL Query Interface over SBOM using SafeDep Cloud
  8. SQL Query Interface over SBOM using SafeDep Cloud
  9. Why Open Source Risks are Larger than SCA Tools
  10. Why Open Source Risks are Larger than SCA Tools
  11. Sneak Peak into SafeDep Cloud Development and SQL Queries
  12. Sneak Peak into SafeDep Cloud Development and SQL Queries
  13. Safe and Secure Consumption of Open Source Libraries
  14. Safe and Secure Consumption of Open Source Libraries