Mend.io Resources, Author at Mend

Mini Shai-Hulud Is Back: 172 npm and PyPI Packages Compromised in Latest Wave

Tom Abai May 12, 2026

Malicious Packages

Shai-Hulud's largest wave: 172 npm and PyPI packages compromised in 48 hours.

PhantomRaven Wave 5: New Undocumented NPM Supply Chain Campaign Targets DeFi, Cloud, and AI Developers

Tom Abai May 3, 2026

Malicious Packages

33 malicious NPM packages target DeFi, cloud, and AI developer credentials.

Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework

Tom Abai Apr 29, 2026

Malicious Packages

SAP CAP packages compromised via Claude Code in AI-assisted worm attack.

The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets

Tom Abai Apr 23, 2026

Malicious Packages

Mend.io tracks TeamPCP's latest supply chain attack.

A Poisoned Xinference Package Targets AI Inference Servers

Tom Abai Apr 22, 2026

Malicious Packages

Three poisoned xinference releases on PyPI target AI infrastructure credentials.

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

Tom Abai Mar 31, 2026

Malicious Packages

See how the attack works, what to look for, and how to remediate.

Famous Telnyx Pypi Package compromised by TeamPCP

Tom Abai Mar 27, 2026

Malicious Packages

See how the attack works, what to look for, and how to remediate.

TeamPCP Supply Chain Attack Part 2: LiteLLM PyPI Credential Stealer

Tom Abai Mar 24, 2026

Malicious Packages

Check and fix your install for the new LiteLLM PyPI compromise.

CanisterWorm: The Self-Spreading npm Attack That Uses a Decentralized Server to Stay Alive

Tom Abai Mar 21, 2026

Malicious Packages

Deep dive into the self-spreading CanisterWorm.

NPM User Flooding Registry with Fake Font Packages

Tom Abai Dec 16, 2025

Malicious Packages

Analysis of an npm account flooding the registry with malformed font packages.

From Zero to RCE: How a Single HTTP Request Compromises React and Next.js Applications

Tom Abai Dec 4, 2025

Malicious Packages

Discover a critical security flaw that enables remote code execution in React Server Components.

Shai-Hulud: The Second Coming

Tom Abai Nov 24, 2025

Malicious Packages

See how the latest Shai-Hulud attack works.

NPM Ecosystem Under Siege: Self-Propagating Malware Compromises 187 Packages in a Huge Supply Chain Attack

Tom Abai Sep 16, 2025

Malicious Packages

A major NPM breach exposed 187 packages.

NPM Supply Chain Attack: Sophisticated Multi-Chain Cryptocurrency Drainer Infiltrates Popular Packages

Tom Abai Sep 8, 2025

Malicious Packages

A sophisticated npm supply chain attack compromised popular packages

Fake VS Code Extension on npm Spreads Multi-Stage Malware

Tom Abai Feb 6, 2025

Malicious Packages

Learn about a fake VS-code extension on npm—truffelvscode—typosquatting the popular truffle for VS-code extension.

- CVE Critical race condition in Apache Tomcat blog

CVE-2024-50379: A Critical Race Condition in Apache Tomcat

Tom Abai Dec 19, 2024

Malicious Packages

An Apache Tomcat web server vulnerability has been published, exposing the platform to remote code execution through a race condition failure.

Mend.io Resources

Subscribe to our Newsletter