Thousands of software development teams whose CI/CD pipelines depended on LocalStack’s free community edition lost access to no-cost, no-account AWS emulation on March 23, 2026, when the company ...
TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...
TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...
Hundreds of npm packages infected by the self-propagating, credential-stealing worm from TeamPCP are related to the open ...
JEP 533, Structured Concurrency, has reached integrated status for JDK 27. It refines exception handling and type safety in ...
Morning Overview on MSN
TeamPCP compromised the CI/CD pipelines behind Trivy, Checkmarx, and LiteLLM — stealing AWS keys from build servers worldwide
Sometime on March 19, 2026, a poisoned version of the open-source security scanner Trivy slipped into automated build ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results