Explore >> Select a destination


You are here

socket.dev
| | www.sysdig.com
1.8 parsecs away

Travel
| | On March 14, 2025, StepSecurity uncovered a compromise in the popular GitHub Action tj-actions/changed-files. Tens of thousands of repositories use this
| | www.sonatype.com
1.2 parsecs away

Travel
| | Sonatype uncovers a wormable npm software supply chain attack compromising over 180 packages, following S1ngularity and Chalk/Debug campaigns.
| | blog.abhimanyu-saharan.com
1.7 parsecs away

Travel
| | A high-severity CVE exposed eslint-config-prettier to a supply chain attack via a phishing compromise. Learn what happened, who's affected, and how to fix it.
| | www.syntaxbearror.io
18.0 parsecs away

Travel
| Supply Chain Attack on MSPs leave thousands with ransomware, Print Spooler woes continue with Windows, and more on this week's episode of Bear Security.