security.snyk.io

• The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised

  The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised A day after the AntV npm supply chain attack, the same campaign appears to have struck `durabletask`, a Microsoft-associated Python package on PyPI. Snyk has coverage in the vulnerability

• Fix SCA issues at scale in your terminal with Snyk Remediation Agent in the CLI

  Fix SCA issues at scale in your terminal with Snyk Remediation Agent in the CLI Stop security backlogs. Snyk's Remediation Agent in the CLI pairs AI reasoning with Snyk security intelligence to fix SCA issues at scale directly in your terminal. Fix SCA issues at scale in your t

• Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp

  Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp A new npm worm is abusing binding.gyp to trigger node-gyp during install, letting malicious packages run code without lifecycle scripts. It steals credentials, persists in GitHub, and self-pr

All reports →

• Connector · intel_report_ingest3