They Hit TanStack. 518 Million Downloads. And the Security Cert Was Real.
They Got Trivy. They Got Axios. Now They're Coming for the Linux Foundation.
CopyFail Compromises The Last 9 Years Of Linux Distros
They're Getting Faster. Open Source Is Under Attack Right Now.
It's Bigger Than TeamPCP. Open Source Is Under Siege.
More Office Suite drama, Chrome downloads AI model without consent, Plasma 6.7 things - Linux News
WHAT IF…Your confidential data is exposed to public clouds? #sovereignAI
It just keeps getting worse
KDE gets €1M, 3 big vulnerabilities for Linux, EU privacy disaster brewing - Linux Weekly News
Look what Intel took from us - Tech News April 12
… A Vercel security bulletin says that on April 19, the company “identified a security incident that involved unauthorized access to certain internal Vercel systems” and led to credential compromise for “a limited subset of customers.” The company contacted those customers and “recommended an immedia… …
… Download Now Related Articles: New Checkmarx supply-chain breach affects KICS analysis tool Smart Slider updates hijacked to push malicious WordPress, Joomla versions Popular node-ipc npm package compromised to steal credentials Shai Hulud attack ships signed malicious TanStack, Mistral npm package… …
On March 19, 2026, threat actors compromised Aqua Security& 039;s CI/CD pipeline and used stolen credentials to push backdoored versions of the aquasec/trivy vulnerability scanner to Docker Hub. A second wave of compromised images followed on March 22. …
… According to security researcher Rami McCarthy , 19 of the 25 accounts used to post were also used in the Trivy spam campaign. The Python Packaging Authority PyPA has published a security advisory about the LiteLLM compromise. …
Signups, silence, and a suspicious text: users joined GTFOICE.org to protest ICE and woke up to messages claiming their data was sent to federal agencies. Just four days ago, Project Salt Box’s Michael Wriston and Defian…
Overview: On May 24, 2026, the data breach notification service Have I Been Pwned (HIBP) integrated a dataset originating from an April 2026 extortion campaign targeting 7-Eleven. The breach, attributed to the threat act…
I just recently deployed Pulse monitoring solution for my Proxmox, VM and containers and have couple of questions on the security related things. I did my own research but couldn't figure out this permissions concern of …
Hi Reddit, We just wrapped up The Android Show | I/O Edition, and a core theme of the show was how we’re making your phone more helpful so that you can spend less time looking at it and more time living your life. To mak…
… The compromises are still under investigation, and additional affected packages may emerge as maintainers and security firms continue auditing publishing infrastructure and compromised credentials. …
… After all of these attacks, Google-owned cloud security shop Wiz said its researchers "saw indications in Cloud, Code, and Runtime evidence that the credentials and secrets stolen in the supply chain compromises were quickly validated and used to explore victim environments and exfiltrate additiona… …
… At that time, every repo's description said: " TeamPCP Owns Aqua Security." According to Socket, "while the full scope of this access remains unclear, the presence of these repositories indicates a deeper level of control over the GitHub organization during the compromise." ® open source special fe…
… So with this success, I expect to see more." Vuln scanner as initial attack vector TeamPCP compromised Trivy, an open source vulnerability scanner maintained by Aqua Security in late February, then injected credential-stealing malware into the scanner on March 16 through the binary, GitHub Actions,… …
… Application security company StepSecurity notes that the threat actor published the infected packages via the legitimate CI/CD pipeline, carrying valid SLSA provenance attestations issued by npm's signing infrastructure and "tied to the legitimate TanStack/router Release workflow." Endor Labs repor… …
… More recently, Microsoft began testing another new feature for the Defender for Endpoint enterprise endpoint security platform that automatically blocks traffic to and from undiscovered Windows endpoints, preventing attackers from breaching other non-compromised devices on the network. …
