Mend.io Blog

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions

Alina Podoba Aug 29, 2026

Mini Shai-Hulud hits openapi-react-query-codegen: 10 malicious npm versions

Filter & Search

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - npm supply chain attack

Mini Shai-Hulud hits openapi-react-query-codegen: 10 malicious npm versions

Alina Podoba Aug 29, 2026

Malicious Packages

An npm supply chain attack published ten malicious versions

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - featured image skill layer dependency problem

The skill layer is a dependency problem without a lockfile: what the OWASP Agentic Skills Top 10 gets right

Asaf Saar Aug 26, 2026

AI Models Risk

Nine solved supply chain risks, one new gap: the OWASP Agentic Skills Top 10.

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - featured image owasp llm top 10 2026

OWASP LLM Top 10 2026: the model will be fooled, the question is what breaks

Asaf Saar Aug 13, 2026

AI Models Risk

The 2026 OWASP LLM Top 10 shifts the job from prevention to containment.

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - featured image black hat usa 2026

That’s a wrap: Mend.io at Black Hat USA 2026

Stephanie Broyles Aug 7, 2026

Inside Mend.io

Mend.io at Black Hat USA 2026: keynote, podcasts, awards, and a hit booth game.

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - featured image patch smarter

Patch faster isn’t the answer. Patch smarter is.

Shannon Davis Aug 4, 2026

Dependency Updates

AI killed the patch window. Smarter patch management is how teams keep up.

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - mini shai hulud hits keyv

Mini Shai-Hulud Hits keyv: Trojanized Release Exfiltrates CI Secrets via GitHub

Alina Podoba Aug 4, 2026

Malicious Packages

Trojanized keyv@6.0.0 exfiltrates CI secrets through GitHub’s own API.

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - featured image move faster than ai driven risk 1000x650

Move faster than AI-driven risk: Inside Mend.io’s latest AI application security update

Asaf Saar Jul 28, 2026

AI Models Risk

AI agent discovery, runtime guardrails, agentic triage, and zero-day speed.

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - featured image ai security testing solutions for dev pipelines

Top 13 AI security testing solutions for dev pipelines in 2026

Tiffany Jennings Jul 23, 2026

Application Security Testing

Compare the top AI security testing solutions for dev pipelines.

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - inside autogenerated rubygems squats

199 RubyGems, two techniques, zero working payloads: Inside a cryptomining campaign that never ran

Maciej Mensfeld Jul 22, 2026

Malicious Packages

199 malicious gems, zero working payloads: how Mend.io caught the campaign.

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - featured image ai security posture management platforms 1000x650

Best 6 AI security posture management platforms (AI-SPM) in 2026

Tiffany Jennings Jul 21, 2026

AI Models Risk

Compare the top AI security posture management platforms (AI-SPM) for 2026.

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - featured image checkmarx one

Checkmarx One: 7 features, limitations & alternatives

Tiffany Jennings Jul 16, 2026

SAST

Checkmarx One features, limitations, and the top alternatives to consider.

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - featured image independence is the moat

Independence is the moat

Asaf Saar Jul 14, 2026

AI Models Risk

Why the independent security layer keeps winning as AI models get better.

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - featured image dependency management tools

Dependency management tools: Key features and 6 tools to know in 2026

Tiffany Jennings Jul 9, 2026

Dependency Updates

Key features of dependency management tools and 6 notable tools to know in 2026.

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - featured image the ecb just gave banks four months to fix ai vulnerability gaps

The ECB just gave banks four months to fix AI vulnerability gaps. Most of the work starts in the software supply chain.

Tiffany Jennings Jul 8, 2026

Software Supply Chain

The ECB AI cybersecurity letter gives banks until Oct 31 to act. What to know.

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - featured image ai governance platforms for enterprises 1000x650

Best AI Governance Platforms for Enterprises: Top 6 in 2026

Tiffany Jennings Jul 7, 2026

AI Models Risk

The top 6 AI governance platforms for enterprises in 2026, compared.

Mini shai-hulud hits openapi-react-query-codegen: 10 malicious npm versions - featured image ai governance implementation strategies

9-Step AI Governance Implementation Strategy and the Solutions to Know

Tiffany Jennings Jul 2, 2026

AI Models Risk

9 AI governance implementation strategies, plus 14 tools to know.

1 2 3 4 … 38