explore | Grilled Cheese

⏱ We flagged pypi [email protected] 8 hours before the public advisory landed (MAL-2026-17712).

#flaggedfirst #PyPI #malware #supplychainsecurity

⏱ Caught early: npm @xayz/[email protected] was on our radar 53 days before MAL-2026-17384 went public.

#flaggedfirst #npm #malware #supplychainsecurity

📊 In the last day: 31 malicious packages caught across npm, a median 12 days ahead of the public advisory. We were first on 41%.

#malware #supplychainsecurity #opensource

The session continued with Mahmod & Hicks's "Retain The Date: Detecting Recycled Chips in the Supply Chain through SRAM's Data Retention Behavior" on detecting recycled ICs via SRAM aging, reaching 97% accuracy. (www.acsac.org/2025/p...) 5/6
#SupplyChainSecurity #RecycledICs

Malware is now querying smart contracts to hide C2 domains—supply chain security risks just got smarter with Web3. #Web3 #SupplyChainSecurity #BlockchainC2 #Malware #CloudSecurity https://thedailytechfeed.com/hackers-turn-public-blockchains-into-stealth-c2-hubs-in-supply-chain-attacks/

Learn more and apply today: www.sovereign.tech/programs/res...

#OpenSource #PotatoSecurity #SupplyChainSecurity #PotatoResilienceAct

⏱ Caught early: npm @ikyyjee/[email protected] was on our radar 31 days before MAL-2026-17357 went public.

#flaggedfirst #npm #malware #supplychainsecurity

A Gitea security update fixes 27 flaws, including SSRF bug CVE-2026-101027 and SSH key flaw CVE-2026-103059. Upgrade to Gitea 28.1.0 now.

#Gitea #Git #DevSecOps #SSRF #CVE2026101027 #CVE2026103059 #SupplyChainSecurity #Vulnerability

⏱ 57 days of lead time on npm @badzz88/[email protected]: we flagged it, then MAL-2026-17341 confirmed it.

#flaggedfirst #npm #malware #supplychainsecurity

📊 In the last day: 11 malicious packages caught across npm and pypi, a median 49 days ahead of the public advisory. We were first on 64%.

#malware #supplychainsecurity #opensource

The Security Angle
🏢 Freight fraud and double-brokering cost carriers nearly $1 Billion last year.

🔗 Book Demo Today! calendly.com/bidciti-com/...

🌐 Platform: bidciti.pro/Dispatch

#FreightWaves #LogisticsTech #SupplyChainSecurity #USAFreight #DispatchSoftware #BidCiti

📈 This week npm was the most-targeted ecosystem we saw: 246 malicious packages caught, a median 4 days before their public advisories.

#malware #supplychainsecurity #opensource

⏱ 49 days of lead time on npm [email protected]: we flagged it, then MAL-2026-17404 confirmed it.

#flaggedfirst #npm #malware #supplychainsecurity

🚨 Critical TeamCity vulnerability now being exploited by ransomware groups. CVE-2026-63077 CVSS score of 9.8.

#Cybersecurity #Ransomware #DevSecOps #TeamCity #JetBrains #CICD #SupplyChainSecurity #VulnerabilityManagement #SoftwareSecurity #CloudSecurity

tech-insider.org/teamcity-cve...

📊 In the last day: 1 malicious package caught across pypi, ahead of the public advisory. We were first on 6%.

#malware #supplychainsecurity #opensource

⏱ 46 days of lead time on npm [email protected]: we flagged it, then MAL-2026-17444 confirmed it.

#flaggedfirst #npm #malware #supplychainsecurity