Blog Archiv

Sicherheit für die Lieferkette

Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks

4. August 2026

KI

A First Look at Evo Agentic AppSec: Agentic Remediation and Malicious Code Defense

4. August 2026

KI

The Attacker Never Sleeps, Neither Can Your Testing

30. Juli 2026

KI

Secure at Inception: Announcing the Snyk Studio Integration for Snowflake Cortex Code

30. Juli 2026

Schwachstellen-Insights

NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligence

25. Juni 2026

KI

Announcing Agentic Development Security (ADS)

23. Juni 2026

KI

What nearly 10,000 developer environments reveal about agentic development risk

23. Juni 2026

Sicherheit für die Lieferkette

When a vendor's breach becomes yours: lessons from the Klue incident

23. Juni 2026

Open-Source-Sicherheit

The full Snyk AI Security Platform, free for open source maintainers

18. Juni 2026

Sicherheit für die Lieferkette

A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope

16. Juni 2026

KI

The Government Just Banned an AI Model. An Engineer's Perspective.

15. Juni 2026

Sicherheit für die Lieferkette

Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp

4. Juni 2026

KI

So You Have an AI Security Budget. Now what?

4. Juni 2026

KI

Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection

2. Juni 2026

Sicherheit für die Lieferkette

Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages

1. Juni 2026

Sicherheit für die Lieferkette

Laravel Lang Supply Chain Advisory

23. Mai 2026

Sicherheit für die Lieferkette

Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account

18. Mai 2026

Sicherheit für die Lieferkette

Malicious node-ipc versions published to npm in suspected maintainer account compromise

15. Mai 2026

Sicherheit für die Lieferkette

TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack

11. Mai 2026

Sicherheit für die Lieferkette

lightning PyPI Compromise: A Bun-Based Credential Stealer in Python

30. April 2026

Sicherheit für die Lieferkette

"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages

29. April 2026

Sicherheit für die Lieferkette

Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

27. April 2026

KI

JPMorgan Just Published a Cyber To-Do List and Snyk Covers 8 of the 10 Items. How do you stack up?

23. April 2026

KI

Governing Security in the Age of Infinite Signal – From Discovery to Control

10. April 2026