Blog Archiv

Sicherheit für die Lieferkette

Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp

4. Juni 2026

KI

Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection

2. Juni 2026

Sicherheit für die Lieferkette

TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack

11. Mai 2026

Sicherheit für die Lieferkette

lightning PyPI Compromise: A Bun-Based Credential Stealer in Python

30. April 2026

Sicherheit für die Lieferkette

"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages

29. April 2026

Anwendungssicherheit

Qinglong task scheduler RCE vulnerabilities exploited in the wild for cryptomining

27. April 2026

KI

JPMorgan Just Published a Cyber To-Do List and Snyk Covers 8 of the 10 Items. How do you stack up?

23. April 2026

KI

You Patched LiteLLM, But Do You Know Your AI Blast Radius?

2. April 2026

KI

How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM

24. März 2026

KI

Securing the Agent Skills Registry: How Snyk and Tessl Are Setting the Standard

17. März 2026

KI

The 89% Problem: How LLMs Are Resurrecting the "Dormant Majority" of Open Source

4. März 2026

KI

Claude Code Security: A Welcome Evolution in the Remediation Loop

23. Februar 2026

KI

How “Clinejection” Turned an AI Bot into a Supply Chain Attack

19. Februar 2026

KI

Snyk and Cline: Securing the Future of Autonomous Coding

18. Februar 2026

KI

Exploitability Isn’t the Answer. Breakability Is.

12. Februar 2026

KI

How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware

10. Februar 2026

KI

Beyond Detection: Building a Resilient Software Supply Chain (Lessons from the Shai-Hulud Post-Mortem)

8. Januar 2026

Anwendungssicherheit

The Holiday Whisper: Shai-Hulud 3.0

29. Dezember 2025

KI

How Snyk Helps Federal Agencies Prepare for the Genesis Mission Era of AI-Driven Science

9. Dezember 2025

KI

Run AutoMCP To Supercharge Your AI Agent with Libraries MCP Servers

3. Dezember 2025

KI

Scaling AI Security: How Evo Complements New Agentic Tools

24. November 2025

KI

Snyk and Continue Partner to Embed AI-Powered Security into Every Step of the Developer Workflow

18. November 2025

Sicherheit für die Lieferkette

Automated Package-Publication Incident IndonesianFoods in the NPM Ecosystem Linked to Crypto Reward-Farming Scam

13. November 2025

KI

Malicious MCP Server on npm postmark-mcp Harvests Emails

25. September 2025