Cybersecurity

Checkmarx Security Update

26 sec read38 views0 listens

Checkmarx identified a supply chain security incident involving malicious versions of two plugins distributed via OpenVSX; only organizations that downloaded and ran these specific plugins between certain times are potentially impacted. Updated plugin versions have been released to mitigate the issue, and Checkmarx advises rotating secrets and reviewing GitHub Actions for suspicious indicators.

Read the full article at Malware Analysis, News and Indicators - Latest topics

Want to create content about this topic? Use Nemati AI tools to generate articles, social posts, and more.

GitHub Source Code Breach - TeamPCP Claims Access to 4,000 Repositories

A threat actor known as TeamPCP claims to have stolen source code from approximately 4,000 private GitHub repositories, offering it for sale on the dark web. This incident highlights significant supply chain risks for developers, as TeamPCP has a his...

Ali Nemati

AI & Machine LearningMar 2725 sec read

Supply Chain Attacks on Developers: Lessons from LiteLLM and Trivy

Supply chain attacks targeting developer tools have surged, as evidenced by the LiteLLM PyPI compromise and Trivy GitHub Actions incident. These attacks exploit dependencies to steal credentials and breach data, highlighting a shift in tactics from t...

Ali Nemati

Cybersecurity7 hours ago26 sec read

GitHub says internal repositories were taken in poisoned VS Code extension attack

GitHub confirmed that internal repositories were compromised after an employee's device was infected by a malicious Visual Studio Code extension, highlighting the increasing risks to software development platforms and third-party tools. This incident...

Ali Nemati

Cybersecurity17 hours ago22 sec read

GitHub Hacked - Internal Source Code Repositories Compromised via Employee Device

GitHub confirmed a security breach involving unauthorized access to internal repositories through a compromised Visual Studio Code extension used by an employee. This incident highlights the increasing threat of supply chain attacks targeting develop...

Ali Nemati

Cybersecurity6 days ago26 sec read

node-ipc npm Package with 822K Weekly Downloads Compromised in Supply Chain Attack

Three newly published versions of the node-ipc package, widely used for JavaScript inter-process communication with over 822,000 weekly downloads, have been compromised to include malicious payloads. This supply chain attack affects developers using ...

Ali Nemati

Checkmarx Security Update

Related Articles

GitHub Source Code Breach - TeamPCP Claims Access to 4,000 Repositories

Supply Chain Attacks on Developers: Lessons from LiteLLM and Trivy

GitHub says internal repositories were taken in poisoned VS Code extension attack

GitHub Hacked - Internal Source Code Repositories Compromised via Employee Device

node-ipc npm Package with 822K Weekly Downloads Compromised in Supply Chain Attack