Blog Archive

Supply Chain Security

SHA1-Hulud, npm supply chain incident

November 24, 2025

Supply Chain Security

Automated Package-Publication Incident IndonesianFoods in the NPM Ecosystem Linked to Crypto Reward-Farming Scam

November 13, 2025

Supply Chain Security

Phishing Campaign Leveraging the NPM Ecosystem

October 9, 2025

Supply Chain Security

Zero-day Extensive NPM Package Compromise - Shai Hulud Supply Chain Attack

September 15, 2025

Application Security

Snyk Joins CISA's Secure by Design Pledge

August 5, 2025

Application Security

Maintainers of ESLint Prettier Plugin Attacked via npm Supply Chain Malware

July 22, 2025

AI

Cursor IDE Malware Extension Compromise in $500k Crypto Heist

July 21, 2025

AI

Human + AI: The Next Era of Snyk's Vulnerability Curation

July 14, 2025

Code Security

Do not pass GO - Malicious Package Alert

February 12, 2025

Compliance

Understanding the EU’s Cyber Resilience Act (CRA)

January 22, 2025

AI

Ultralytics AI Pwn Request Supply Chain Attack

December 11, 2024

Code Security

The mysterious supply chain concern of string-width-cjs npm package

October 3, 2024

ASPM

Meet Snyk for Government: Our developer security solution with FedRAMP ATO

September 17, 2024

Application Security

Want to avoid a data breach? Employ secrets detection

September 16, 2024

Supply Chain Security

Three trends shaping software supply chain security today

August 22, 2024

Supply Chain Security

Kroger’s approach to supply chain security

January 2, 2024

AI

Nightfall AI and Snyk unite to deliver AI-powered secrets scanning for developers

November 29, 2023

Supply Chain Security

Secure your software supply chain with the new Snyk Vulnerability Intelligence for SBOM ServiceNow integration

November 7, 2023

AI

What does Biden's Executive Order on AI safety measures mean for businesses?

November 2, 2023

Cloud Security

Adding Snyk security to Jira and Bitbucket Cloud

October 25, 2023

Supply Chain Security

Cybersecurity Venture’s 2023 Software Supply Chain Attack Report

October 10, 2023

Supply Chain Security

Critical WebP 0-day security CVE-2023-4863 impacts wider software ecosystem

September 28, 2023

Supply Chain Security

Developer-first supply chain security

September 19, 2023

Supply Chain Security

CodeSecDays conference and more complete security coverage with GitGuardian

August 10, 2023