News
SBOM Security
13+ hour, 6+ min ago (304+ words) Cyclone DX + SPDX SBOMs across Python, Node, Maven, and Go with OSV vulnerability correlation, dependency drift, and license/policy CI gating. For security leaders it is a portable, auditable supply-chain check that drops into pre-commit and Git Hub Actions, produces…...
Injective Says It Blocked npm Package Hack Attempt, Confirms No Funds Lost
1+ day, 3+ hour ago (477+ words) Injective, the blockchain platform known for its cross-chain De Fi capabilities, announced on X that its security systems detected and neutralized a hacking attempt targeting its npm package. The project confirmed that no user funds were compromised and that the…...
Hackers tried to backdoor Injective npm package to steal wallet keys
21+ hour, 23+ min ago (544+ words) Hackers compromised a widely used Injective software package in a supply chain attack with malware designed to steal crypto wallet private keys, adding to a growing attack vector involving attackers using legitimate platforms to deliver malicious payloads. Security firm Socket…...
Mobile Application Security Testing
1+ day, 7+ hour ago (302+ words) Static analysis scanner for Android APK and i OS IPA files with 130+ SAST rules across 24 check modules, MASVS v2 mapping, and 39 dependency CVEs Because the whole scanner is one ~2, 800-line Python file that runs on the 3. 8+ standard library alone, it drops…...
Open Mandriva Linux project reportedly targeted in attempted sabotage after contributor dispute | brief
23+ hour, 57+ min ago (78+ words) Open Mandriva Linux project reportedly targeted in attempted sabotage after contributor dispute SC Media Open Mandriva Linux project reportedly targeted in attempted sabotage after contributor dispute Injective Labs SDK npm package compromised to steal cryptocurrency keys North Korean Polin Rider…...
Injective Labs SDK npm package compromised to steal cryptocurrency keys | brief
23+ hour, 58+ min ago (75+ words) Injective Labs SDK npm package compromised to steal cryptocurrency keys SC Media Injective Labs SDK npm package compromised to steal cryptocurrency keys North Korean Polin Rider supply chain attack targets 108 unique repos Aikido Security acquires Root. io to enhance open-source…...
Static Application Security Testing
1+ day, 13+ hour ago (344+ words) Multi-language SAST covering Java, PHP, Python, MERN, and OWASP LLM Top 10 with 200+ rules, 80+ dependency CVEs, and M365 SSPM It is built for App Sec engineers, Dev Sec Ops teams, and consultants who want a fast, auditable, dependency-free way to gate merges…...
Injective software package hit by malicious supply chain attack " Details
1+ day, 6+ hour ago (290+ words) Software supply chain attacks have become more common, with attackers increasingly targeting trusted developer tools instead of end users. In the latest incident, attackers compromised a trusted Injective Labs software package to steal developers" wallet credentials. The attacker uploaded a…...
IBM expands Bob to support the entire software development lifecycle
1+ day, 11+ hour ago (436+ words) IBM is adding new capabilities to its AI platform Bob, enabling organizations not only to generate code but also to support the entire software development cycle. The expansion focuses on collaboration between multiple AI agents, parallel task processing, and better…...
Injective resolves npm package compromise in under an hour with zero user impact
1+ day, 8+ hour ago (272+ words) Attackers hijacked a maintainer's Git Hub account to publish malicious code designed to steal private keys, but security firms caught it before real damage was done. A compromised maintainer account, 18 tainted npm packages, and a payload designed to siphon private…...