The Curious Engineer

All blogs / Security

SafeDep’s Blog

safedep.io

SafeDep helps teams detect malicious packages, protect AI agents, and govern open source risk across developer machines, CI/CD pipelines, and production workflows.

SecurityDevOps / SRE / infrastructure

’24’25’26
Posts
168 from 15 Sep 2024 to 22 Oct 2026
Posting
weekly (127 in the last year)
Kind
company blog
Feed
https://safedep.io/rss.xml

2026 122

  1. eMudhra CA Key Compromise: Response Guide for Developers
  2. testmetest npm Packages Carry a Miasma-Family Worm
  3. SCA & SBOM Scan dependencies, generate SBOMs, enforce policy.
  4. AI Agent Discovery See every AI tool and SDK in your org.
  5. AI Agent Monitoring Audit every action your AI agents take.
  6. Developer Security Block malicious packages at install-time.
  7. CI/CD Security Block malicious packages in your pipeline.
  8. MCP Server Block threats inside your AI coding agent.
  9. Agent API Threat intelligence API for custom agents.
  10. Threat Intelligence Real-time malicious package verdicts.
  11. Endpoint Protection Package events & AI inventory in the cloud.
  12. Platform Centralized policies, dashboard, compliance.
  13. Book a Demo
  14. Terms
  15. Pricing
  16. How it works
  17. Open Source Program
  18. Threat Intel Data Hub
  19. Faq
  20. Compromised LiteLLM 1.107.0 on PyPI Installs a Credential Stealer and Backdoor
  21. Forged Commits Push a preinstall Dropper into hugo-paper and mevn-cli
  22. MALFEX Moves Its npm Loader into a Native Windows DLL
  23. ASOS App Hack: Attackers Used Push Notifications to Send a Ransom Note
  24. tensorlake 0.5.144 npm Compromise Ships Mini Shai-Hulud
  25. 42 Malicious RubyGems Open a Reverse Shell at Install Time
  26. An Attacker Hijacked an AI Coding Assistant to Spread a Worm
  27. PolinRider Switches to Ethereum C2 in 30+ Repositories
  28. DirtyBlanket: Fake Express Packages on npm Spread a Linux Worm
  29. Detecting Compromised AI Coding Agents with Jev and Gryph
  30. Mini Shai-Hulud Is Still Infecting GitHub Repositories
  31. MemTensor npm and PyPI Packages Hit by a Go Worm
  32. sckit: A New Go Implant Framework for Supply Chain Worms
  33. OpenAI Agents Turned RubyGems Into a Scraping Proxy
  34. Why Does an npm Math Library Need an Encrypted Loader?
  35. The Agentic IDE Extension Blind Spot
  36. Deep-Live-Cam Supply Chain Attack: Technical Analysis
  37. Introducing SafeDep Threat Intel
  38. A malicious npm package hidden three dependencies deep: the ulid-xyz delivery chain
  39. Mini Shai-Hulud Strikes Again: openapi-react-query-codegen
  40. From YouTube Ad to Root: How a Fake TradingView Installer Delivers a macOS Stealer
  41. Malicious Rust Crate arrayref Runs a Build-Time Payload
  42. npm Bin Entry Harvesting: A Dependency Confusion Blind Spot
  43. Baileys npm forks farm WhatsApp Channel followers
  44. keyv and cacheable npm compromise: 400+ packages
  45. Joyfill npm Packages Compromised with Blockchain C2 Loader
  46. mrmustard PyPI Package Trojanized to Steal Credentials
  47. @copilot-mcp/apex: A macOS Infostealer Re-Published on npm After Takedown
  48. AsyncAPI Packages Compromised with Miasma RAT
  49. Official jscrambler npm Package Compromised Across Multiple Releases
  50. nodemon-sudo: an npm Backdoor With No Install Script
  51. @marketfront: 25 npm Packages Reuse a Known Lure
  52. The Polymarket Trap: A Fake Arbitrage Bot, Ten npm Accounts, and Four Ways to Deliver an Infostealer
  53. Miasma Worm Infects Multiple LeoPlatform npm Packages
  54. The wshu.net npm Campaign Delivers a Multi-Stage Infostealer
  55. MYRA: A Full Linux RAT Distributed via npm
  56. @withgoogle/stitch-sdk: Scope Squat Harvests Developer Credentials
  57. Five npm Packages That Hide a Windows Binary Dropper
  58. Mastra npm Scope Takeover: 143 Packages Drop a RAT
  59. astro.config.mjs Supply Chain Attack via Blockchain C2
  60. Miasma Worm: Most Infected GitHub Repos Are Still Live
  61. Inside the Miasma Software Supply Chain Attack Toolkit
  62. Config Files That Run Code: Supply Chain Security Blindspot
  63. Miasma Worm Targets AI Coding Agents via GitHub Repos
  64. Axios Typosquats Deliver the Epsilon Stealer
  65. Mini Shai-Hulud "Miasma: The Spreading Blight" Hits @redhat-cloud-services: Multiple Packages at Risk
  66. Inside MicrosoftSystem64: A Supply Chain RAT Exfiltrating to HuggingFace
  67. 183 npm Packages Target Cloud and Finance via oob.moika.tech
  68. 141 npm Packages Abuse Registry as Adware Hosting
  69. forge-jsxy: 22 Versions of an Actively Developed npm RAT
  70. Megalodon: Mass GitHub Repo Backdooring via CI Workflows
  71. Polymarket npm Packages Steal Crypto Wallet Keys
  72. art-template npm Hijack Delivers iOS Browser Exploit Kit
  73. Malicious durabletask on PyPI: Multi-Cloud Credential Stealer with Worm Capabilities
  74. Mini Shai-Hulud Strikes Again: 317 npm Packages Compromised
  75. Compromised node-ipc on npm: Credential Stealer via DNS Exfiltration
  76. Malicious npm Packages Backdoor Claude Code Sessions
  77. Cache Poisoning Through pull_request_target: The TanStack Incident
  78. Mass Supply Chain Attack Hits TanStack, Mistral AI npm and PyPI Packages
  79. Endpoint Protection for Developer Machines
  80. noon-contracts npm Package: DeFi Supply Chain RAT
  81. martinez-polygon-clipping-tony: Trojanized npm Fork Drops Telegram RAT
  82. node-env-resolve: npm Package Installs a Full RAT
  83. common-tg-service: 502 npm Versions Hijack Telegram
  84. exiouss: Cookie Stealer Bundled in npm Exam Cheat
  85. PyTorch Lightning Compromised: Shai-Hulud Worm Reaches PyPI
  86. Mini Shai Hulud and SAP Compromise
  87. Malicious redeem-onchain-sdk npm Targets Crypto Wallets
  88. npm-global-util: Credential Theft and Supply Chain Attack
  89. Bitwarden CLI Supply Chain Compromise
  90. Malicious Pull Requests: A Threat Model
  91. ixpresso-core: Windows RAT Disguised as a WhatsApp Agent
  92. PMG dependency cooldown: wait on fresh npm versions
  93. forge-jsx npm Package: Purpose-Built Multi-Platform RAT
  94. Malicious npm Package js-logger-pack Ships a Multi-Platform WebSocket Stealer
  95. Malicious dom-utils-lite npm SSH Backdoor via Supabase
  96. Malicious npm Dependency Confusion Campaign Targets Genoma UI and Others
  97. big.js Typosquat Campaign Implants SSH Backdoors
  98. @fairwords npm Packages Hit by Credential Worm
  99. Malicious @velora-dex/sdk Delivers Go RAT via npm
  100. Malicious hermes-px on PyPI Steals AI Conversations
  101. prt-scan: A 5-Phase GitHub Actions Credential Theft Campaign
  102. Thirty-Six Malicious npm Strapi Packages Deploy Redis RCE, Database Theft, and Persistent C2
  103. Compromised npm Package mgc Deploys Multi-Platform RAT
  104. Malicious npm Package express-session-js Drops Full RAT Payload
  105. axios Compromised: npm Supply Chain Attack via Dependency Injection
  106. Compromised telnyx on PyPI: WAV Steganography and Credential Theft
  107. Malicious litellm 1.82.8: Credential Theft and Persistent Backdoor
  108. sl4x0 Dependency Confusion: 92 Packages Target Fortune 500
  109. Trivy Supply Chain Compromise: What Happened, What Was Stolen, and How to Respond
  110. Malicious npm Package react-refresh-update Drops Cross-Platform Trojan on Developer Machines
  111. How to Write Time-Based Security Policies in SafeDep vet
  112. Threat Modeling the AI-Native SDLC: Supply Chain Security in the Age of Coding Agents
  113. Malicious npm Package pino-sdk-v2 Exfiltrates Secrets to Discord
  114. Gryph: Audit Trail for AI Coding Agents
  115. Integrate SafeDep MCP in GitHub Agentic Workflow
  116. Shadow AI Discovery: Find Every AI Tool and SDK in Your Stack
  117. Malicious npm Packages Target Schedaero via Dependency Confusion
  118. npm SANDWORM_MODE Attack: Step-by-Step Malware Analysis
  119. AI Agent Cline v2.3.0 Compromised: From Prompt Injection to Unauthorized npm Publish
  120. Why We Built a Hosted MCP Server to Stop Malicious Packages for AI Agents
  121. End-to-End test with Nextjs, Playwright and MSW
  122. Agent Skills Threat Model

2025 39

  1. The State of MCP Registries
  2. DarkGPT: Malicious Visual Studio Code Extension Targeting Developers
  3. Unpacking CVE-2025-55182: React Server Components RCE Exploit Deep Dive and SBOM-Driven Identification
  4. Shai-Hulud 2.0 npm Supply Chain Attack Technical Analysis
  5. An Opinionated Approach for Frontend Testing for Startups
  6. Curious Case of Embedded Executable in a Newly Introduced Transitive Dependency
  7. Malicious npm Packages Impersonating Hyatt Internal Dependencies
  8. Contributing to SafeDep Open Source Projects during Hacktoberfest 2025
  9. Ship Code. Not Malware. SafeDep Launches GitHub App for Malicious Package Protection
  10. Shai-Hulud Supply Chain Attack Incident Response
  11. Diff-based SCA with AI is Broken — Real Examples from Pipfile.lock, yarn.lock, and Cargo.lock
  12. npm Supply Chain Attack Exposes Private Repositories, AWS Credentials and More
  13. npm Supply Chain Attack: Multiple Popular Packages Hijacked (1B+ Weekly Downloads)
  14. nx Build System Compromised Targeting Linux and MacOS developers
  15. TensorFlow.js Typosquatting Attack: Malicious Package Targeting AI/ML Developers
  16. Multiple Malicious Python Packages Targeting Bittensor Crypto Developers
  17. Security Risks in PEP 723 and uv: Inline Metadata Gone Wrong?
  18. Secure Vibe Coding with AI Agents
  19. eslint-config-prettier Compromised: How npm Package with 30 Million Downloads Spread Malware
  20. SBOM Completeness with Direct & Transitive Dependencies
  21. SBOM and the EU Cyber Resilience Act (CRA) – What Software Vendors Need to Know
  22. Introducing SafeDep Model Context Protocol (MCP) Server to Secure AI Generated Code
  23. License Compliance with SBOM
  24. Introducing Container Image Scanning
  25. Software Bill of Materials: Foundation for Trust in Software Supply Chain
  26. Catching the Silent Threat: How Dynamic Analysis Revealed a Complex npm Attack Chain
  27. Introducing Package Manager Guard (PMG)
  28. Dynamic Malware Analysis of Open Source Packages at Scale
  29. Malicious npm Package Impersonating Popular Express Cookie Parser
  30. Malicious npm Package Impersonating Java SLF4J
  31. Announcing DefectDojo Integration
  32. Analysis of 5000+ Malicious Open Source Packages
  33. 🚀 Introducing GitLab CI/CD Component
  34. Agentic Workflows for Malicious Package Analysis
  35. Typosquatt alert ! Malicious npm Package: nyc-config
  36. Introducing vetpkg.dev - Open Source Component Security Dashboard
  37. Eliminating SCA Noise using Dependency Usage Evidence
  38. What is Next Generation Software Composition Analysis?
  39. Malicious npm Packages using Burp Collaborator for Dependency Confusion Attack

2024 7

  1. npm - The Playground for Malicious Packages
  2. Malicious Open Source Library Analysis: llm-oracle and its Payload
  3. How a Security Team use Policy as Code for Open Source Security
  4. SQL Query Interface over SBOM using SafeDep Cloud
  5. Why Open Source Risks are Larger than SCA Tools
  6. Sneak Peak into SafeDep Cloud Development and SQL Queries
  7. Safe and Secure Consumption of Open Source Libraries