4 posts with this tag

#Supply Chain Attack

4 posts

Mastra npm compromise turns AI agent builds into credential-theft risk

Mastra npm compromise turns AI agent builds into credential-theft risk The Mastra npm incident is a sharp warning for teams building AI agents: dependency compr...

Last updated on 17/08/2026 at 12:56 PM

8 min read

Lucas Oliveira

Research

Red Hat npm compromise proves provenance alone is not enough

supply chain attack

Supply Chain Attack

npm

Red Hat npm compromise proves provenance alone is not enough

Red Hat npm compromise proves provenance alone is not enough Red Hat has confirmed that multiple packages published under the @redhat-cloud-services npm namespa...

Last updated on 17/08/2026 at 12:56 PM

6 min read

Lucas Oliveira

Research

Supply Chain Security

Cisco

Trivy

Cisco Breach Shows the Real Cost of the Trivy Supply-Chain Attack

Cisco Breach Shows the Real Cost of the Trivy Supply-Chain Attack The most important lesson from the Trivy incident is that a supply-chain attack on a trusted s...

Last updated on 01/04/2026 at 6:08 AM

5 min read

Lucas Oliveira

Research

Axios npm compromise pushed a cross-platform RAT through a fake dependency

Supply Chain Security

npm Security

Supply Chain Attack

Axios npm compromise pushed a cross-platform RAT through a fake dependency

Axios npm compromise pushed a cross-platform RAT through a fake dependency A compromise of the widely used axios package on npm shows why defenders cannot rely...

Last updated on 01/04/2026 at 5:25 AM

5 min read

Lucas Oliveira

Research

#Supply Chain Attack

Mastra npm compromise turns AI agent builds into credential-theft risk

Red Hat npm compromise proves provenance alone is not enough

Cisco Breach Shows the Real Cost of the Trivy Supply-Chain Attack

Axios npm compromise pushed a cross-platform RAT through a fake dependency

Tags