Mend.io Blog

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework

Tom Abai Apr 29, 2026

Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework

Filter & Search

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - mini shai hulud

Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework

Tom Abai Apr 29, 2026

Malicious Packages

SAP CAP packages compromised via Claude Code in AI-assisted worm attack.

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - the butlerian jihad

The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets

Tom Abai Apr 23, 2026

Malicious Packages

Mend.io tracks TeamPCP's latest supply chain attack.

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - blog cover team pcp part 4 1

A Poisoned Xinference Package Targets AI Inference Servers

Tom Abai Apr 22, 2026

Malicious Packages

Three poisoned xinference releases on PyPI target AI infrastructure credentials.

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - blog zero day visibility 1000x650

From Panic to Playbook: Modernizing Zero‑Day Response in AppSec

Shannon Davis Apr 21, 2026

Application Security

Learn how AppSec teams build a repeatable zero-day response workflow.

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - sast all about static application security testing post

What Is SAST – Static Application Security Testing

Aurora Starita Apr 16, 2026

SAST

Learn about Static Application Security Testing (SAST).

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - blog image sca tools 1

Best Software Composition Analysis (SCA) Tools: Top Solutions in 2026

Tiffany Jennings Apr 14, 2026

Software Composition Analysis

Learn what SCA tools do and how they help secure your open source dependencies.

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - blog project glasswing 1000x650

Anthropic’s Project Glasswing: What It Means for AppSec

Shannon Davis Apr 9, 2026

Application Security

See what AI-powered offense means for your AppSec & AI Security program.

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - docker hardened images integration

Container Security Without Context Is Just More Noise

Shannon Davis Apr 7, 2026

Container Security

Smarter container security with Docker Hardened Images.

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - blog ai application security 1000x650

AI Application Security: 6 Focus Areas and Critical Best Practices

Tiffany Jennings Apr 2, 2026

AI Models Risk

Learn how AI application security differs from traditional AppSec.

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - blog cover poisoned axios

Poisoned Axios: npm Account Takeover, 50 Million Downloads, and a RAT That Vanishes After Install

Tom Abai Mar 31, 2026

Malicious Packages

See how the attack works, what to look for, and how to remediate.

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - blog cover team pcp part 3

Famous Telnyx Pypi Package compromised by TeamPCP

Tom Abai Mar 27, 2026

Malicious Packages

See how the attack works, what to look for, and how to remediate.

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - blog cover team pcp attack v2

TeamPCP Supply Chain Attack Part 2: LiteLLM PyPI Credential Stealer

Tom Abai Mar 24, 2026

Malicious Packages

Check and fix your install for the new LiteLLM PyPI compromise.

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - blog cover canisterworm

CanisterWorm: The Self-Spreading npm Attack That Uses a Decentralized Server to Stay Alive

Tom Abai Mar 21, 2026

Malicious Packages

Deep dive into the self-spreading CanisterWorm.

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - cursor incident

Moonshot AI governance breakdown: Lessons from the Cursor/Kimi K2.5 incident

Tiffany Jennings Mar 20, 2026

AI Models Risk

Cursor’s Composer 2 identified as Moonshot’s Kimi K2.5 exposing an AI governance gap.

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - blog mend partnership expansion 1000x650

Mend.io Expands Its Global Infrastructure with a Dedicated Cloud Region in India

Stephanie Broyles Mar 19, 2026

Application Security

Local cloud infrastructure in India for data residency requirements.

Shai-hulud strikes sap: supply chain worm weaponized claude code to compromise the cap framework - blog ai driven project classification

Introducing AI-powered Contextual Project Classification: From severity scores to business risk

Tiffany Jennings Mar 17, 2026

AI Models Risk

Find your most sensitive code and prioritize fixes.

1 2 3 4 ... 37

AI Security & Compliance Assessment

Map your maturity against the global standards. Receive a personalized readiness report in under 5 minutes.

Get your report