/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 mazinahmed.net
Compromising Developers with Malicious Extensions - VS Code, Cursor AI, and the Backdoor You Didn't See Coming ยท Mazin Ahmed
| | blog.aquasec.com
A Popular npm Library Compromised in a Supply Chain Attack: What to Do
2.9 parsecs away

Travel
| | In the latest npm supply chain attack, a popular library was compromised, here are the explanation of the attack flow and mitigation recommendations
| | blog.koi.security
Risk Research & Threat Insights | Koi
2.5 parsecs away

Travel
| | Deep research and expert insights on software supply chain risk, browser extensions, AI security, MCP threats, and enterprise risks.
| | grith.ai
AI Agent Backdoors Trivy Security Scanner, Weaponizes a VS Code Extension | grith
2.5 parsecs away

Travel
| | The hackerbot-claw campaign is the first documented case of an AI agent executing a full supply chain attack - exploiting a CI misconfiguration, stealing tokens, and publishing a malicious VS Code extension that targets other AI coding agents.
| | socket.dev
Supply Chain Attack Detected in Solana's web3.js Library - S...
4.4 parsecs away

Travel
| A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.