Security

Miasma is a self-propagating supply-chain worm that steals developer credentials and cloud secrets by hijacking npm packages, PyPI packages, and GitHub repository configuration files. Built on the pub…

Protestware is open-source software that a maintainer intentionally sabotages to deliver a political or social message, targeting users rather than doing what the package advertises. The technique ran…

Mini Shai-Hulud is the fourth-generation variant of the Shai-Hulud supply-chain worm family, built by threat group TeamPCP to self-propagate across npm, PyPI, and Packagist by stealing CI/CD credentia…

Universal Linux LPE describes a local privilege escalation exploit that gains root access across every major Linux distribution — no race condition required, no kernel-version-specific offsets, no ele…

A webhook secret is a shared string used to authenticate webhook deliveries: the sender computes an HMAC signature over the payload with the secret and sends it in a header like `X-Hub-Signature-256`;…