Back to Blog
4 posts with this tag
#npm Security
4 posts
Bitwarden CLI npm compromise exposes CI/CD credential risk
Bitwarden CLI npm compromise exposes CI/CD credential risk A brief compromise of the Bitwarden CLI npm distribution is still a high-priority defender story beca...
Last updated on 17/08/2026 at 12:56 PM
5 min read
Lucas Oliveira
Research
Axios npm compromise pushed a cross-platform RAT through a fake dependency
Axios npm compromise pushed a cross-platform RAT through a fake dependency A compromise of the widely used axios package on npm shows why defenders cannot rely...
Last updated on 01/04/2026 at 5:25 AM
5 min read
Lucas Oliveira
Research
GlassWorm Shifts to Transitive Open VSX Dependencies in Developer Supply-Chain Push
GlassWorm Shifts to Transitive Open VSX Dependencies in Developer Supply-Chain Push GlassWorm is no longer just a story about obviously malicious extensions. Th...
Last updated on 21/03/2026 at 10:09 AM
5 min read
Lucas Oliveira
Research
Cline CLI 2.3.0 supply chain attack silently installed OpenClaw on developer systems
Cline CLI 2.3.0 supply chain attack silently installed OpenClaw on developer systems Executive summary The Cline CLI supply chain incident is a practical remind...
Last updated on 17/08/2026 at 12:55 PM
5 min read
Lucas Oliveira
Research
Tags
7-Zip
1
aaylex
0
Access Control
7
Account Takeover
8
active-directory
1
Active Exploitation
6
ActiveMQ
1
Adobe
2
Adobe Campaign Classic
1
Adobe Commerce
1
AI Platform
1
AI Security
17
ALPHV
0
Apache
1
API Security
3
Apple
1
Application Security
3
APT28
1
Archive Security
1
Arista
1
Artificial Intelligence
2
Authentication
1
Authentication Bypass
18
Authentication Tokens
3
Authorization Bypass
1