Mend.io Blog

The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets

A Poisoned Xinference Package Targets AI Inference Servers

From Panic to Playbook: Modernizing Zero‑Day Response in AppSec

What Is SAST – Static Application Security Testing

Best AI Red Teaming Tools: Top 7 Platforms and Services in 2026

Best Software Composition Analysis (SCA) Tools: Top Solutions in 2026

Anthropic’s Project Glasswing: How Claude Mythos is Changing the Rules for AppSec

Container Security Without Context Is Just More Noise

AI Application Security: 6 Focus Areas and Critical Best Practices

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

Famous Telnyx Pypi Package compromised by TeamPCP

62 Generative AI Statistics to Know in 2026

TeamPCP Supply Chain Attack Part 2: LiteLLM PyPI Credential Stealer

CanisterWorm: The Self-Spreading npm Attack That Uses a Decentralized Server to Stay Alive

Moonshot AI governance breakdown: Lessons from the Cursor/Kimi K2.5 incident

Mend.io Expands Its Global Infrastructure with a Dedicated Cloud Region in India