Explore >> Select a destination
|
You are here 
|
www.koi.ai | ||
| | | | |
blog.koi.security
|
|
| | | | | Deep research and expert insights on software supply chain risk, browser extensions, AI security, MCP threats, and enterprise risks. | |
| | | | |
www.backslash.security
|
|
| | | | | A major npm supply-chain incident surfaced last week. Over 800 packages were poisoned, leading to more than 25,000 GitHub repositories being populated with stolen secrets. Projects linked to Zapier, ENS Domains, PostHog, and Postman were briefly affected. | |
| | | | |
www.koi.security
|
|
| | | | | ||
| | | | |
www.koi.security
|
|
| | | [AI summary] A malicious MCP server, postmark-mcp, was discovered stealing emails from users by adding a BCC line to its code, highlighting vulnerabilities in the supply chain and trust in third-party tools. | ||
