Mend.io Blog

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive

Tom Abai Mar 21, 2026

CanisterWorm: The Self-Spreading npm Attack That Uses a Decentralized Server to Stay Alive

Filter & Search

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - blog cover canisterworm

CanisterWorm: The Self-Spreading npm Attack That Uses a Decentralized Server to Stay Alive

Tom Abai Mar 21, 2026

Malicious Packages

Deep dive into the self-spreading CanisterWorm.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - cursor incident

Moonshot AI governance breakdown: Lessons from the Cursor/Kimi K2.5 incident

Tiffany Jennings Mar 20, 2026

AI Models Risk

Cursor’s Composer 2 identified as Moonshot’s Kimi K2.5 exposing an AI governance gap.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - blog mend partnership expansion 1000x650

Mend.io Expands Its Global Infrastructure with a Dedicated Cloud Region in India

Stephanie Broyles Mar 19, 2026

Application Security

Local cloud infrastructure in India for data residency requirements.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - blog ai driven project classification

Introducing AI-powered Contextual Project Classification: From severity scores to business risk

Tiffany Jennings Mar 17, 2026

AI Models Risk

Find your most sensitive code and prioritize fixes.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - system prompt weakness detection blog post

Introducing System Prompt Hardening: production-ready protection for system prompts

Tiffany Jennings Mar 10, 2026

AI Models Risk

Secure your AI applications with system prompt hardening.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - blog ai compliance

AI Compliance: 5 Key Frameworks, Challenges, and Best Practices

Tiffany Jennings Mar 3, 2026

AI Models Risk

Discover how to manage bias, privacy, and shadow AI risks.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - blog ai risk management

AI Risk Management: Process, Frameworks, and 5 Mitigation Methods

Tiffany Jennings Feb 26, 2026

AI Models Risk

Learn how to identify, assess, and mitigate AI risks.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - blog claude code security

Why Claude Code Security Is a Big Moment for Application Security

Stephanie Broyles Feb 23, 2026

Application Security

Discover why enterprise scale requires more than just AI code review - it requires governance.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - blog best software composition analysis providers

Best Software Composition Analysis Providers: Top 5 in 2026

Tiffany Jennings Feb 19, 2026

Software Composition Analysis

Explore key features of leading SCA providers.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - blog image agent configuration scanning

Securing the New Control Plane: Introducing Static Scanning for AI Agent Configurations

Jeff Martin Feb 17, 2026

AI Models Risk

Announcing the launch of AI Agent Configuration Scanning.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - blog ai security testing

AI Security Testing: Threats, Approaches, and Defenses in 2026

Tiffany Jennings Feb 12, 2026

AI Models Risk

Explore AI security testing methods.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - blog cover open source security with ai

You can’t rely on open source for security — not even when AI is involved

Jeff Martin Feb 6, 2026

Application Security

Learn how to manage OSS risk and build remediation that actually lands.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - blog top 10 open source vulnerabilities

Top Open Source Vulnerabilities In 2026

Tiffany Jennings Feb 3, 2026

Open Source Security

Discover the top open source vulnerabilities in 2026.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - blog blackduck sast

Understanding Black Duck SAST: Pros/Cons and Technical Architecture

Tiffany Jennings Jan 27, 2026

SAST

A detailed review of Black Duck SAST plus a Mend SAST alternative.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - blog cover ai security maturity checklist

Introducing Mend.io’s AI Security Maturity Survey + Compliance Checklist available today

Tiffany Jennings Jan 20, 2026

AI Models Risk

A new tool to help security teams quantify AI risk and prepare for 2026 regulations.

Canisterworm: the self-spreading npm attack that uses a decentralized server to stay alive - blog best software composition analysis enterprise

Best Software Composition Analysis for Enterprise: Top 8 in 2026

Tiffany Jennings Jan 15, 2026

Software Composition Analysis

Explore this guide to the best software composition analysis tools for large teams.

1 2 3 4 ... 36

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report