Liran Tal

Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks

4 de agosto de 2026

Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice?

29 de junho de 2026

A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope

16 de junho de 2026

Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp

4 de junho de 2026

The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised

19 de maio de 2026

Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account

18 de maio de 2026

Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers

27 de abril de 2026

Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT

30 de março de 2026

The 89% Problem: How LLMs Are Resurrecting the "Dormant Majority" of Open Source

4 de março de 2026

DAST vs. Penetration Testing: 5 Key Differences

2 de março de 2026

Why Your “Skill Scanner” Is Just False Security (and Maybe Malware)

11 de fevereiro de 2026

SAST vs. DAST vs. IAST vs. RASP: Understanding Application Security Testing Methods

11 de fevereiro de 2026