Mend.io Blog

Mastra npm Scope Takeover: 140+ Packages Compromised via easy-day-js Dropper

Why AI Can’t Verify Its Own Code and What That Means for Enterprise AppSec

AI code review tools: Key benefits and 8 tools to know in 2026

Best Software Composition Analysis Services: Top 8 in 2026

AI Security Agents: Key Capabilities and 5 Critical Best Practices

AI Guardrails in 2026: Types, Challenges, and Impact of Agentic AI

Miasma: Red Hat Cloud Services npm Packages Hit by a Mini Shai-Hulud-Style Campaign

OWASP Top 10 for LLM Applications: Risks, Impact, and Mitigation

Best Application Security Testing Providers: Top 8 in 2026

Laravel-Lang Composer tag-rewrite Supply Chain Attack

Mini Shai-Hulud Hits @antv: 323 npm Packages Compromised Through the atool Maintainer Account

Inside the RubyGems Supply Chain Attack: How Mend Defender Caught a Coordinated Flood Before It Spread

Mini Shai-Hulud Is Back: 172 npm and PyPI Packages Compromised in Latest Wave

Mend.io and GitHub Partner to Bring Mend Renovate Cloud to Open Source Maintainers

Mend.io’s Stephanie Broyles Named to CRN’s 2026 Women of the Channel List

PhantomRaven Wave 5: New Undocumented NPM Supply Chain Campaign Targets DeFi, Cloud, and AI Developers