Tag: developer security
AsyncAPI npm packages with millions of weekly downloads compromised via GitHub actions
Five AsyncAPI npm packages with 2.9 million weekly downloads were trojanized after a GitHub Actions token theft.
New Attack Exploits AI Coding Agents via Sentry Error Platform
Tenet Security researchers discovered a technique called Agentjacking that uses crafted Sentry error reports to trick AI coding assistants into…
Over 1,800 Developers Compromised in Mini Shai-Hulud Supply Chain Attack
The threat actors infiltrated legitimate npm packages for SAP, Lightning, and Intercom to deploy credential-harvesting code, compromising over 1,800 developers.