Blog Archiv

Sicherheit für die Lieferkette

Malicious node-ipc versions published to npm in suspected maintainer account compromise

15. Mai 2026

Sicherheit für die Lieferkette

TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack

11. Mai 2026

Sicherheit für die Lieferkette

lightning PyPI Compromise: A Bun-Based Credential Stealer in Python

30. April 2026

Sicherheit für die Lieferkette

"A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages

29. April 2026

Sicherheit für die Lieferkette

Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

27. April 2026

KI

JPMorgan Just Published a Cyber To-Do List and Snyk Covers 8 of the 10 Items. How do you stack up?

23. April 2026

KI

Governing Security in the Age of Infinite Signal – From Discovery to Control

10. April 2026

KI

You Patched LiteLLM, But Do You Know Your AI Blast Radius?

2. April 2026

Sicherheit für die Lieferkette

Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT

30. März 2026

KI

How a Poisoned Security Scanner Became the Key to Backdooring LiteLLM

24. März 2026

KI

Introducing Agent Security

23. März 2026

KI

I Read Cursor's Security Agent Prompts, So You Don't Have To

17. März 2026

KI

Securing the Agent Skills Registry: How Snyk and Tessl Are Setting the Standard

17. März 2026

KI

How “Clinejection” Turned an AI Bot into a Supply Chain Attack

19. Februar 2026

KI

Securing the Agent Skill Ecosystem: How Snyk and Vercel Are Locking Down the New Software Supply Chain

17. Februar 2026

KI

Weaving Security into the Flow: New Snyk Studio Capabilities Power the AI Security Fabric

17. Februar 2026

KI

Exploitability Isn’t the Answer. Breakability Is.

12. Februar 2026

KI

How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware

10. Februar 2026

KI

Beyond Detection: Building a Resilient Software Supply Chain (Lessons from the Shai-Hulud Post-Mortem)

8. Januar 2026

KI

Secure by Default: Why Snyk and Augment Code are the New Standard for AI Development

7. Januar 2026

Anwendungssicherheit

The Holiday Whisper: Shai-Hulud 3.0

29. Dezember 2025

KI

Evo Adds CycloneDX Support to Give Full AI Visibility

19. Dezember 2025

Sicherheit für die Lieferkette

SHA1-Hulud, npm supply chain incident

24. November 2025

Sicherheit für die Lieferkette

Automated Package-Publication Incident IndonesianFoods in the NPM Ecosystem Linked to Crypto Reward-Farming Scam

13. November 2025