Blog Archive

Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp

Type Level Security: The future of secure AI code generation?

So You Have an AI Security Budget. Now what?

The New Security Risks of the Agentic Development Lifecycle

Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection

Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages

How Relay Network Adopted AI Coding Securely and Built the Foundation for Agentic Development

Fix SCA issues at scale in your terminal with Snyk Remediation Agent in the CLI

Continuous Offensive Security: The Line We've Been Walking

Laravel Lang Supply Chain Advisory

Securing The AI Revolution: How Snyk And Our Partners Are Scaling For The Future

A Day in the Life of a Strategy Co-Op in Snyk’s Boston Office

The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised

Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account

Malicious node-ipc versions published to npm in suspected maintainer account compromise

TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack

lightning PyPI Compromise: A Bun-Based Credential Stealer in Python

"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages

Bridging the Gap to Autonomous Fixes: Snyk and Atlassian Unveil Intelligent Remediation for Jira

Don't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)

Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

Qinglong task scheduler RCE vulnerabilities exploited in the wild for cryptomining

Introducing the New Agentic Architecture for Snyk Agent Fix: Faster, Smarter, and More Secure

Hardcoding Security into Every Commit: The Future of Snyk Secrets