SafeDep Headlines

Cybernoz

SafeDep reported the leak of Miasma worm source code on GitHub, analyzing its features including a dead-man switch and AI coding assistant poisoning.

Companies:SafeDep

LavX News

Article reports SafeDep's discovery of the Miasma worm source code leak on GitHub, detailing its features and dead-man switch.

Companies:SafeDep

Data Today

Data Today's live coverage of the Miasma worm includes multiple references to Socket's research, campaign tracker, and detection of the PyPI wave.

Companies:SafeDepSocket

BleepingComputer

Researchers at SafeDep reported that the Miasma credential-stealing worm's source code was leaked on GitHub via compromised developer accounts, detailing its capabilities and implications.

Companies:SafeDep

The Register

The Register reports on the Miasma worm's source code being published on GitHub, citing SafeDep's analysis of the self-spreading malware.

Companies:SafeDep

ComplexDiscovery

ComplexDiscovery discusses Miasma's use of AI coding agents, citing SafeDep's documentation of the campaign's source-repository compromises.

Companies:SafeDep

CPO Magazine

SafeDep detected the Megalodon supply chain attack that infected over 5,500 repositories and stole cloud credentials.

Companies:SafeDep

InfoSec Today

InfoSec Today covers the Miasma supply chain attack, referencing analyses from SafeDep and other security firms.

Companies:SafeDep

Yahoo Tech

SafeDep researchers uncovered the Megalodon campaign infecting over 5,500 GitHub repositories with an infostealer.

Companies:SafeDep

Mashable

SafeDep researchers detailed the Megalodon supply chain attack that infected over 5,500 GitHub repositories.

Companies:SafeDep

SecurityWeek

SafeDep discovered the 'Megalodon' supply chain attack that infected over 5,500 GitHub repositories with malicious CI workflows to steal credentials.

Companies:SafeDep

ProbablyPwned

SafeDep's Malysis scanning engine detected the Megalodon operation that backdoored thousands of repositories.

Companies:SafeDep

Ciphers Security

Ciphers Security provides a detailed technical analysis of the Megalodon attack, crediting SafeDep for discovering the campaign and analyzing the payload.

Companies:SafeDep

CyberSecureFox

CyberSecureFox reports on the Mini Shai-Hulud attack affecting AntV packages, citing SafeDep's independent analysis of 631 malicious versions in 314 packages.

Companies:SafeDep

Cybernews

Cybernews reports on the Megalodon attack, citing SafeDep's research and quoting their findings about workflow backdooring and credential theft.

Companies:SafeDep

Cloud Security Alliance

CSA Lab Space publishes a research note analyzing the Shai-Hulud and Megalodon attacks, referencing SafeDep's discovery and analysis of the Megalodon wave.

Companies:SafeDepGuardrails AI

Hackread

Hackread reports on the Megalodon attack, detailing SafeDep's discovery and analysis of the campaign that targeted over 5,500 repositories.

Companies:SafeDep

IMP.NEWS

IMP.NEWS covers the supply chain attack, citing SafeDep's finding that attackers published over 630 malicious versions across 317 packages in 20 minutes.

Companies:SafeDep

SafeDep

SafeDep reports a major supply chain attack where 317 npm packages were compromised in 22 minutes, with malware targeting credentials and AI coding tools.

Companies:SafeDep

Tech Weekly

Tech Weekly reports on the supply chain attack, citing SafeDep's analysis that hackers released over 630 malicious versions across 317 packages.

Companies:SafeDep

The Register

The Register reports on the Mini Shai-Hulud attack where 314 npm packages were infected, citing SafeDep's analysis of the malware and its credential-stealing payload.

Companies:SafeDep

Yahoo Tech

Yahoo Tech covers the wave of supply chain attacks, quoting SafeDep's findings about over 630 malicious versions across 317 packages published in 20 minutes.

Companies:SafeDep

BleepingComputer

Socket tracked 416 compromised package artifacts in the Shai Hulud attack.

Companies:SafeDepSocket

InfoWorld

The article discusses a supply chain attack affecting npm packages, with SafeDep being one of the first to detect the compromise and providing analysis and action items.

Companies:SafeDep

VentureBeat

VentureBeat's analysis of the Shai-Hulud worm references SafeDep's confirmation of Mistral AI package compromise.

Companies:SafeDep