Mend.io Blog

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers

Tom Abai May 3, 2026

PhantomRaven Wave 5: New Undocumented NPM Supply Chain Campaign Targets DeFi, Cloud, and AI Developers

Filter & Search

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - npm supply chain attack

PhantomRaven Wave 5: New Undocumented NPM Supply Chain Campaign Targets DeFi, Cloud, and AI Developers

Tom Abai May 3, 2026

Malicious Packages

PhantomRaven Wave 5: New Undocumented NPM Supply Chain Campaign Targets DeFi, Cloud, and AI Developers

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - blog cover linux kernel lpe

CVE-2026-31431 (Copy Fail): Linux Kernel LPE

Dor Hayun Apr 30, 2026

Malicious Packages

New Linux 'copy_fail' LPE gives root on all major distros. Mitigate before patching.

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - mini shai hulud

Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework

Tom Abai Apr 29, 2026

Malicious Packages

SAP CAP packages compromised via Claude Code in AI-assisted worm attack.

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - the butlerian jihad

The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets

Tom Abai Apr 23, 2026

Malicious Packages

Mend.io tracks TeamPCP's latest supply chain attack.

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - blog cover team pcp part 4 1

A Poisoned Xinference Package Targets AI Inference Servers

Tom Abai Apr 22, 2026

Malicious Packages

Three poisoned xinference releases on PyPI target AI infrastructure credentials.

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - blog zero day visibility 1000x650

From Panic to Playbook: Modernizing Zero‑Day Response in AppSec

Shannon Davis Apr 21, 2026

Application Security

Learn how AppSec teams build a repeatable zero-day response workflow.

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - sast all about static application security testing post

What Is SAST – Static Application Security Testing

Aurora Starita Apr 16, 2026

SAST

Learn about Static Application Security Testing (SAST).

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - blog image sca tools 1

Best Software Composition Analysis (SCA) Tools: Top Solutions in 2026

Tiffany Jennings Apr 14, 2026

Software Composition Analysis

Learn what SCA tools do and how they help secure your open source dependencies.

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - blog project glasswing 1000x650

Anthropic’s Project Glasswing: What It Means for AppSec

Shannon Davis Apr 9, 2026

Application Security

See what AI-powered offense means for your AppSec & AI Security program.

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - docker hardened images integration

Container Security Without Context Is Just More Noise

Shannon Davis Apr 7, 2026

Container Security

Smarter container security with Docker Hardened Images.

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - blog ai application security 1000x650

AI Application Security: 6 Focus Areas and Critical Best Practices

Tiffany Jennings Apr 2, 2026

AI Models Risk

Learn how AI application security differs from traditional AppSec.

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - blog cover poisoned axios

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

Tom Abai Mar 31, 2026

Malicious Packages

See how the attack works, what to look for, and how to remediate.

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - blog cover team pcp part 3

Famous Telnyx Pypi Package compromised by TeamPCP

Tom Abai Mar 27, 2026

Malicious Packages

See how the attack works, what to look for, and how to remediate.

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - blog cover team pcp attack v2

TeamPCP Supply Chain Attack Part 2: LiteLLM PyPI Credential Stealer

Tom Abai Mar 24, 2026

Malicious Packages

Check and fix your install for the new LiteLLM PyPI compromise.

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - blog cover canisterworm

CanisterWorm: The Self-Spreading npm Attack That Uses a Decentralized Server to Stay Alive

Tom Abai Mar 21, 2026

Malicious Packages

Deep dive into the self-spreading CanisterWorm.

Phantomraven wave 5: new undocumented npm supply chain campaign targets defi, cloud, and ai developers - cursor incident

Moonshot AI governance breakdown: Lessons from the Cursor/Kimi K2.5 incident

Tiffany Jennings Mar 20, 2026

AI Models Risk

Cursor’s Composer 2 identified as Moonshot’s Kimi K2.5 exposing an AI governance gap.

1 2 3 4 ... 37

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report