CI/CD

Software Supply Chain Under Attack: New Malware Infiltrates PyPI & npm with Advanced Tactics slopsquatting

slopsquatting

Software Supply Chain Under Attack: New Malware Infiltrates PyPI & npm with Advanced Tactics

Do Son June 17, 2025

Amid a surge in increasingly sophisticated software supply chain attacks, cybersecurity experts have identified a new wave...

GitHub Actions Attack: Stolen Token Led to Widespread Secret Leak The malicious code snippet

The malicious code snippet

GitHub Actions Attack: Stolen Token Led to Widespread Secret Leak

Do Son April 10, 2025

While experts were investigating the compromise of the widely used GitHub Action tj-actions/changed-files, it became apparent that...