⏱ We flagged npm [email protected] 7 hours before the public advisory landed (MAL-2026-17190).
@pkgradar.bsky.social
@pkgradar.bsky.social⏱ We flagged npm [email protected] 7 hours before the public advisory landed (MAL-2026-17190).
@pkgradar.bsky.social📊 In the last day: 7 malicious packages caught across npm and pypi, ahead of the public advisory. We were first on 12%.
@cyberfm.bsky.socialTHUR | 24 SEPT 2026 | Cybersecurity Report #Cybersecurity #CyberFM #AriasThomas #CyberWarfare #SmartCities #DataPrivacy #SupplyChainSecurity #BillboardHack #InfoSec #RSSHDelivery #NewYorkTech #TechTok #CyberTok
@inferlume.bsky.socialCritical 0 day exploits shatter Check Point, Cisco, Arista & F5 perimeters as Sandworm, Qilin ransomware & supply chain attacks strike globally.
Full Inferlume report: inferlume.com/reports/dail...
#CyberThreatIntelligence #ZeroDay #SupplyChainSecurity #CISA #Ransomware #InfoSec #NetworkSecurity
@ctsmithiii.bsky.socialHow many forgotten tokens still have access to your repos? GitHub Enterprise Cloud now exports a full credential inventory, including SSH keys, PATs, OAuth and App tokens, with scopes and last-used data. devops.com/github-gives... #DevSecOps #GitHub #SupplyChainSecurity #AppSec
@cyberlensai.bsky.socialAI agent skills deserve code-review energy. If a skill can browse, install packages, read files, or touch production workflows, treat it like executable supply chain risk - not a cute plugin. Scan before you trust. #AIAgents #SupplyChainSecurity
@psoheil.bsky.socialCybercriminals are using fake GitHub repositories to distribute a new information stealer called #Rapuncel.
#Cybersecurity #Malware #Infostealer #GitHub #EDR #InformationSecurity #ThreatIntelligence #SupplyChainSecurity #CyberThreats
@pkgradar.bsky.social⏱ Before the advisory: our scan flagged npm [email protected] 74 days ahead of MAL-2026-16446.
@rustfoundation.orgMeet new Distribution Engineer, Arlo Siemsen 🦀
With funding from Alpha-Omega, Arlo will help land TUF-based signing, mirroring, and verification in support of the Rust Project mirroring project goal.
@pkgradar.bsky.social⏱ Before the advisory: our scan flagged npm @tesla-insurance/[email protected] 5 hours ahead of MAL-2026-16378.
@pkgradar.bsky.social📊 In the last day: 6 malicious packages caught across npm and pypi, ahead of the public advisory. We were first on 85%.
@pkgradar.bsky.social📈 Week in review: 68 malicious packages caught, npm most-targeted, a median 0 days ahead of their public advisories.
@pkgradar.bsky.social⏱ Caught early: npm [email protected] was on our radar 1 day before MAL-2026-16332 went public.
@pkgradar.bsky.social📊 In the last day: 18 malicious packages caught across npm, ahead of the public advisory. We were first on 26%.
@it4intserver.bsky.socialiT4iNT SERVER ⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks VDS VPS Cloud #CyberSecurity #InfoSec #Malware #AI #SupplyChainSecurity
@ipolyzos.comRust maintainers are being targeted through convincing job and project outreach, with attackers ultimately seeking access to trusted package distribution.
The software supply chain includes people too.
@anchore.comStop guessing what "GPL-ish" means. Grant groups licenses by risk so you can approve/deny in seconds. One list, not fifty rules.
👉 https://anchore.com/blog/grants-release-0-3-0-smarter-policies-faster-scans-and-simpler-compliance/
@psoheil.bsky.socialA new AI supply chain vulnerability called #Plugin4Shell highlights a serious weakness in how AI coding agents handle plugins.
#Cybersecurity #AISecurity #ArtificialIntelligence #SupplyChainSecurity #DevSecOps #GitHub #ClaudeCode #OpenAI #Copilot #SoftwareSecurity
@pkgradar.bsky.social⏱ Caught early: npm [email protected] was on our radar 29 days before MAL-2026-16255 went public.
@pkgradar.bsky.social📊 In the last day: 3 malicious packages caught across npm, a median 3 days ahead of the public advisory. We were first on 8%.