Slopsquatting: The AI Hallucination That Infects Your Codebase
Discover AI Slopsquatting, the new supply chain attack where AI code assistants hallucinate malicious packages, tricking developers into installing malware.
7 min read
Topic
NPM
Every article tagged NPM, newest first.
2 articles
Articles tagged NPM
The Mass NPM Hijack Explained
Anatomy of the mass NPM hijack that breached the internet's core. This CISO's guide details the attack, its impact, and the immediate action plan you must execute now.
9 min readLooking for something specific?
Search every article by topic, tool or CVE.
Keep reading
Latest from the blog
GitHub Package Firewall: Install-Time Security for AI Agents and Pipelines
GitHub Package Firewall brings install-time npm policy gates, SLSA attestation checks, and version cooldowns to AI coding agents and CI/CD runners.
18 min read
Node.js Brotli RCE (CVE-2026-111497): Patch Guide
Node.js CVE-2026-111497 exposes Brotli decoding to potential RCE. Check affected versions, fetch() exposure, WAF limits, and the October 2026 patch checklist.
15 min read
PHP2Shell (CVE-2026-109618 & CVE-2026-109619): Critical PHP RCE Patch Guide
PHP2Shell (CVE-2026-109618 & CVE-2026-109619) exposes 70% of the web to unauthenticated PHP RCE and memory leaks. Check fixed versions, IOCs, and mitigations.
23 min read