Mend.io Blog

Best Software Composition Analysis Services: Top 8 in 2026

Miasma: Red Hat Cloud Services npm Packages Hit by a Mini Shai-Hulud-Style Campaign

OWASP Top 10 for LLM Applications: Risks, Impact, and Mitigation

Best Application Security Testing Providers: Top 8 in 2026

Laravel-Lang Composer tag-rewrite Supply Chain Attack

The EU Cyber Resilience Act: A Complete Compliance Guide for 2026 and Beyond

Mini Shai-Hulud Hits @antv: 323 npm Packages Compromised Through the atool Maintainer Account

Inside the RubyGems Supply Chain Attack: How Mend Defender Caught a Coordinated Flood Before It Spread

Mini Shai-Hulud Is Back: 172 npm and PyPI Packages Compromised in Latest Wave

Mend.io and GitHub Partner to Bring Mend Renovate Cloud to Open Source Maintainers

Mend.io’s Stephanie Broyles Named to CRN’s 2026 Women of the Channel List

Best SAST Solutions: How to Choose Between the Top 12 Tools in 2026

PhantomRaven Wave 5: New Undocumented NPM Supply Chain Campaign Targets DeFi, Cloud, and AI Developers

CVE-2026-31431 (Copy Fail): Linux Kernel LPE

Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework

Best SAST Tools in 2026: Top 10 Solutions Reviewed