Mend.io Blog

The EU Cyber Resilience Act: A Complete Compliance Guide for 2026 and Beyond

Mini Shai-Hulud Hits @antv: 323 npm Packages Compromised Through the atool Maintainer Account

Inside the RubyGems Supply Chain Attack: How Mend Defender Caught a Coordinated Flood Before It Spread

Mini Shai-Hulud Is Back: 172 npm and PyPI Packages Compromised in Latest Wave

Mend.io and GitHub Partner to Bring Mend Renovate Cloud to Open Source Maintainers

Mend.io’s Stephanie Broyles Named to CRN’s 2026 Women of the Channel List

Best SAST Solutions: How to Choose Between the Top 12 Tools in 2026

PhantomRaven Wave 5: New Undocumented NPM Supply Chain Campaign Targets DeFi, Cloud, and AI Developers

CVE-2026-31431 (Copy Fail): Linux Kernel LPE

Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework

The Butlerian Jihad: Compromised Bitwarden CLI Deploys npm Worm, Poisons AI Assistants, and Dumps GitHub Secrets

A Poisoned Xinference Package Targets AI Inference Servers

From Panic to Playbook: Modernizing Zero‑Day Response in AppSec

What Is SAST – Static Application Security Testing

Best Software Composition Analysis (SCA) Tools: Top Solutions in 2026

Anthropic’s Project Glasswing: How Claude Mythos is Changing the Rules for AppSec