#SupplyChainSecurity

The Mini Shai-Hulud worm compromised 84 @tanstack packages in six minutes, bypassing valid OIDC provenance and 2FA. Here is exactly what LucidShark SCA surfaces in your editor before the malicious payload runs.

Attackers exploited a GitHub Actions script injection vulnerability to publish a malicious version of the elementary-data Python CLI (v0.23.3), embedding a credential-stealing backdoor that targeted dbt profiles, cloud provider keys, and SSH secrets from…

In this blog, we will take a look at and break down a recent Magecart attack detected and mitigated by Client-Side Protection & Compliance. The impacted customer operates a large international e-commerce business in which one of its websites was…