# vulnerability-insights Published articles for vulnerability-insights. This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## The AI Hurricane Is Here DevFeed: [The AI Hurricane Is Here]() Original publisher: [Read original article]() Author: Manoj Nair Published: 2026-09-15T04:00:00Z Content type: opinion Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Artificial Intelligence](), [AI Development](), [Security](), [Vulnerabilities](), [Architecture & Design](), [audit trail]() Tags: [agentic-development](), [agents](), [ai](), [application-security](), [audit-trail](), [awareness](), [blog](), [code-security](), [developer](), [executive](), [security](), [security-labs](), [snyk-platform](), [snyk-security-intel](), [supply-chain-security](), [tech](), [validation](), [vulnerabilities](), [vulnerability-insights]() ### AI overview The article argues that AI is accelerating software creation and cyberattacks, widening the gap between machine-speed development and slower validation. It calls for securing agentic development, enforcing runtime controls, maintaining inventories and audit trails for production AI applications, and using independent validation. ### Source excerpt AI is accelerating software creation and cyberattacks alike. Leaders must secure agents and code at inception, enforce controls at runtime, and validate defenses independently. ## Is prevention essentially a solved problem? DevFeed: [Is prevention essentially a solved problem?]() Original publisher: [Read original article]() Author: Ezra Tanzer Published: 2026-09-10T04:00:00Z Content type: opinion Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [AI Development](), [Vulnerabilities](), [Architecture & Design](), [Code]() Tags: [agent](), [agentic](), [ai](), [application-security](), [awareness](), [blog](), [code](), [code-security](), [cost](), [developer](), [devops](), [devsecops](), [secrets](), [security](), [snyk-code](), [snyk-open-source](), [snyk-platform](), [vulnerabilities](), [vulnerability-insights]() ### AI overview The article argues that preventing vulnerabilities in agent-generated code is architecturally understood, but organizations must apply the appropriate controls throughout a changing development lifecycle. It says prompts can influence code but cannot reliably constrain agents, and that earlier security intervention reduces model-token cost, human attention, and the risk of an incorrect fix. ### Source excerpt Prevention in agent-generated code is architecturally solved--but choosing controls that protect security without slowing development remains the challenge. ## Benchmarking Secure-and-Functional Remediation and How Snyk Agent Fix Lifts Frontier-Model Fix Rates by over 14% DevFeed: [Benchmarking Secure-and-Functional Remediation and How Snyk Agent Fix Lifts Frontier-Model Fix Rates by over 14%]() Original publisher: [Read original article]() Author: Stephen Thoemmes Published: 2026-08-18T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [benchmarking](), [LLM evaluation / benchmarking](), [vulnerability](), [AI-assisted coding](), [JavaScript](), [Python]() Tags: [agentic](), [ai](), [awareness](), [benchmark](), [benchmarking](), [benchmarks](), [blog](), [code-security](), [developer](), [devops](), [evaluation](), [interest](), [java](), [javascript](), [performance](), [python](), [security](), [security-labs](), [snyk-code](), [snyk-security-intel](), [vulnerability](), [vulnerability-insights]() ### AI overview A benchmark of about 150 vulnerable JavaScript, Java, and Python samples evaluates whether frontier models produce fixes that are both secure and functional. The article reports that models working alone reach roughly 72-75%, while Snyk Intelligence raises Opus 4.6 from 74.6% to 85.4% and improves Python results from 64% to 88%. ### Source excerpt A benchmark of secure, functional vulnerability fixes across JavaScript, Java, and Python shows Snyk Intelligence helps frontier models break past a 72-75% performance plateau. ## Show, Don't Tell: What Evo Continuous Offensive Security Found in a Real Enterprise SaaS DevFeed: [Show, Don't Tell: What Evo Continuous Offensive Security Found in a Real Enterprise SaaS]() Original publisher: [Read original article]() Author: Nuno Loureiro; Luis Grangeia Published: 2026-08-10T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Vulnerabilities](), [Authorization](), [Software as a service](), [Microservice](), [Microservices](), [Front end](), [API](), [App](), [Artificial Intelligence](), [Trustworthy AI]() Tags: [agent](), [ai](), [api](), [application-security](), [applications](), [attacks](), [autonomous](), [awareness](), [blog](), [customer](), [customer-featured](), [cybersecurity](), [devops](), [enterprise](), [frontend](), [interest](), [microservices](), [saas](), [security](), [vulnerabilities](), [vulnerability-insights](), [web]() ### AI overview Evo Continuous Offensive Security (COS) is presented as an autonomous offensive-security system combining AI pentesting, agent red teaming, and dynamic testing. The article reports a real assessment of a multi-tenant enterprise SaaS application that uncovered 33 confirmed vulnerabilities, including tenant-wide compromise and critical authorization flaws. ### Source excerpt A real Evo Continuous Offensive Security assessment uncovered 33 confirmed vulnerabilities in a multi-tenant enterprise SaaS, including tenant-wide compromise and critical authorization flaws. ## A First Look at Evo Agentic AppSec: Agentic Remediation and Malicious Code Defense DevFeed: [A First Look at Evo Agentic AppSec: Agentic Remediation and Malicious Code Defense]() Original publisher: [Read original article]() Author: Brendan Hann Published: 2026-08-04T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Vulnerabilities](), [AI Bots]() Tags: [agent](), [agentic](), [ai](), [ai-agents](), [ai-security](), [application-security](), [aspm](), [autonomous](), [blog](), [cli](), [code-security](), [developer](), [devops](), [interest](), [javascript](), [node-js](), [open-source-security](), [pull-request](), [python](), [security](), [snyk-code](), [snyk-open-source](), [snyk-platform](), [snyk-security-intel](), [supply-chain](), [supply-chain-security](), [vulnerabilities](), [vulnerability-insights]() ### AI overview Snyk introduces Evo Agentic AppSec capabilities for automatically remediating vulnerabilities and blocking malicious packages before they reach code. The Remediation Agent triages issues, creates and checks fixes, and opens pull requests for review. ### Source excerpt Explore Snyk's first Agentic AppSec capabilities: an autonomous Remediation Agent that fixes vulnerabilities and Malicious Code Defense that blocks risky packages before they ship. ## Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks DevFeed: [Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks]() Original publisher: [Read original article]() Author: Liran Tal; Lion Kontorer Published: 2026-08-04T04:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [incident](), [releases]() Tags: [awareness](), [blog](), [ci](), [ci-cd](), [code](), [developer](), [devops](), [embedded](), [enablement](), [ide](), [incident](), [javascript](), [malware](), [manifest](), [node-js](), [npm-packages](), [open-source-security](), [payload](), [persistence](), [releases](), [research](), [scm](), [secrets](), [security](), [security-labs](), [snyk-learn](), [snyk-open-source](), [snyk-security-intel](), [software](), [supply-chain](), [supply-chain-security](), [vulnerability-insights]() ### AI overview Snyk reports an active supply-chain incident in which keyv 6.0.0 and ten related npm releases contained install-time malware. The article describes the malicious preinstall hook, its second-stage payload, affected-release investigation, and remediation guidance. ### Source excerpt keyv 6.0.0 and ten related npm releases shipped install-time malware. See affected versions, hashes, detection steps, and safe remediation order. ## The Attacker Never Sleeps, Neither Can Your Testing DevFeed: [The Attacker Never Sleeps, Neither Can Your Testing]() Original publisher: [Read original article]() Author: Manoj Nair Published: 2026-07-30T00:00:00Z Content type: opinion Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [AI-assisted coding](), [Developer Tools]() Tags: [agents](), [ai](), [application-security](), [awareness](), [blog](), [code](), [code-security](), [devops](), [devsecops](), [executive](), [finserv](), [interest](), [open-source-security](), [security](), [snyk-apprisk](), [snyk-code](), [snyk-open-source](), [snyk-platform](), [software](), [supply-chain-security](), [tech](), [testing](), [vulnerability-insights]() ### AI overview AI-driven code generation is expanding software attack surfaces while giving attackers machine-speed reasoning capabilities. The article argues that security teams need continuous testing, agent governance, and independent validation of findings. ### Source excerpt AI is accelerating software development and giving attackers machine-speed capabilities. Security teams must continuously test AI-built code, govern agents, and independently validate every finding. ## Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice? DevFeed: [Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice?]() Original publisher: [Read original article]() Author: Liran Tal Published: 2026-06-29T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Application Security](), [Vulnerabilities](), [AI-assisted coding]() Tags: [agentic](), [ai](), [application-security](), [awareness](), [benchmark](), [blog](), [claude](), [code-security](), [developer](), [devops](), [engineering](), [interest](), [llms](), [node-js](), [security](), [snyk-code](), [snyk-open-source](), [snyk-platform](), [vulnerability](), [vulnerability-insights]() ### AI overview Snyk VulnBench JS 1.0 evaluates how consistently agentic LLM security reviews find vulnerabilities across identical repeated scans. Reference-matched findings were comparatively stable, while LLM-only reports varied substantially; the article argues for combining LLM review with deterministic SAST rather than replacing either approach. ### Source excerpt Snyk VulnBench JS 1.0: 300 repeated scans show LLM security findings vary by run, while SAST and models catch different vulnerability gaps. ## NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligence DevFeed: [NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligence]() Original publisher: [Read original article]() Author: Michelle Ginzburg; Noa Yaffe-Ermoza Published: 2026-06-25T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Vulnerabilities](), [open-source-security](), [Security](), [data]() Tags: [ai](), [article](), [awareness](), [developer](), [devops](), [interest](), [open-source](), [open-source-security](), [security](), [snyk-open-source](), [snyk-security-intel](), [software](), [supply-chain-security](), [technology](), [vulnerability](), [vulnerability-insights]() ### AI overview The article explains why vulnerability intelligence is moving beyond reliance on the National Vulnerability Database. It describes NIST's shift toward prioritized triage and presents Snyk's multi-source approach, combining vulnerability advisories, analyst validation, internal enrichment, open-source context, and multiple risk assessments to help teams prioritize remediation. ### Source excerpt NIST's shift to risk-based enrichment makes one thing clear: modern security teams need more than a single public source. In the AI era, trusted vulnerability intelligence depends on multiple signals, human validation, and clear context. ## When a vendor's breach becomes yours: lessons from the Klue incident DevFeed: [When a vendor's breach becomes yours: lessons from the Klue incident]() Original publisher: [Read original article]() Author: Anthony Larkin Published: 2026-06-23T03:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [incident](), [Software as a service](), [Security](), [OAuth](), [data](), [Back end]() Tags: [backend](), [blog](), [breach](), [crm](), [customer](), [data](), [executive](), [incident](), [oauth](), [pmm](), [saas](), [salesforce](), [secrets](), [security](), [supply-chain-security](), [tech](), [tokens](), [vulnerability-insights]() ### AI overview The article examines how a forgotten Klue credential enabled attackers to compromise the vendor's backend, harvest OAuth tokens, access connected customer Salesforce environments, and exfiltrate CRM data. It presents the incident as an example of how a SaaS breach can cascade across downstream customers. ### Source excerpt A forgotten credential at vendor Klue let attackers reach customers' Salesforce data. How modern SaaS breaches cascade, and the keys you should audit. ## The full Snyk AI Security Platform, free for open source maintainers DevFeed: [The full Snyk AI Security Platform, free for open source maintainers]() Original publisher: [Read original article]() Author: Brendan Hann Published: 2026-06-18T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Maintainers](), [Open Source](), [Security](), [vulnerability](), [open-source-security](), [Artificial Intelligence](), [Frontier Model](), [Remote Access Trojan](), [AI Infrastructure]() Tags: [agent](), [ai](), [ai-infrastructure](), [ai-security](), [article](), [awareness](), [bugs](), [developer](), [enablement](), [engineering](), [frontier-model](), [interest](), [maintainers](), [open-source](), [open-source-security](), [remote-access-trojan](), [security](), [snyk-code](), [snyk-container](), [snyk-iac](), [snyk-open-source](), [snyk-platform](), [snyk-team](), [software](), [supply-chain-security](), [vulnerability](), [vulnerability-insights]() ### AI overview Snyk's Secure Developer Program gives qualifying open source projects free access to the Snyk AI Security Platform. It is designed to help maintainers prioritize real vulnerability reports and produce validated, merge-ready fixes through the Snyk Remediation Agent. ### Source excerpt Open source maintainers are drowning in real vulnerability reports and need help prioritizing, fixing, and shipping remediation faster. Snyk's Secure Developer Program gives qualifying projects free access to the Snyk AI Security Platform. ## A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope DevFeed: [A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope]() Original publisher: [Read original article]() Author: Liran Tal; Marian Corneci Published: 2026-06-16T21:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [incident]() Tags: [awareness](), [blog](), [ci-cd](), [cross-platform](), [cryptocurrency](), [developer](), [devops](), [devrel](), [devsecops](), [incident](), [javascript](), [node-js](), [open-source-security](), [payload](), [persistence](), [remote-access-trojan](), [sbom](), [scm](), [secrets](), [security](), [snyk-open-source](), [supply-chain](), [supply-chain-security](), [tech](), [tls](), [vulnerability-insights]() ### AI overview A dormant former-contributor npm account was compromised and used to republish the Mastra package scope with a malicious dependency that installs cryptocurrency-stealing malware and a persistent remote-access trojan. The article describes the stale access control that enabled the supply-chain incident and advises treating affected installations as credential and wallet exposure events. ### Source excerpt A dormant contributor account was used to republish the entire @mastra npm scope, each injected with a single dependency, easy-day-js, that drops a cross-platform cryptocurrency stealer. Here is how the attack worked, how to check exposure, and how to remediate. ## The Government Just Banned an AI Model. An Engineer's Perspective. DevFeed: [The Government Just Banned an AI Model. An Engineer's Perspective.]() Original publisher: [Read original article]() Author: Randall Degges Published: 2026-06-15T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Artificial Intelligence](), [Security](), [Vulnerabilities](), [anthropic](), [Jailbreak](), [Machine Learning, Security Attacks](), [Code review](), [migration]() Tags: [ai](), [analysis](), [anthropic](), [application-security](), [awareness](), [blog](), [bugs](), [code](), [compliance](), [developer](), [devops](), [executive](), [interest](), [jailbreak](), [migration](), [security](), [snyk-platform](), [snyk-security-intel](), [supply-chain](), [supply-chain-security](), [tech](), [vulnerabilities](), [vulnerability-insights](), [work]() ### AI overview An engineer examines the abrupt government-ordered shutdown of Anthropic's Fable 5 and Mythos 5 AI models after a jailbreak exposed powerful vulnerability-finding capabilities. The article argues that dependence on an AI vendor can create a supply-chain risk for engineering and security workflows, emphasizing the need for contingency plans when model access can disappear without warning. ### Source excerpt A government order abruptly took down a powerful AI model, exposing a new kind of supply chain risk for engineering teams. Security leaders need contingency plans before the next model disappears. ## Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp DevFeed: [Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp]() Original publisher: [Read original article]() Author: Liran Tal Published: 2026-06-04T04:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [npm](), [Malware](), [Security](), [GitHub Actions](), [GitHub](), [Maintainers]() Tags: [awareness](), [blog](), [ci-cd](), [container-security](), [developer](), [devops](), [devsecops](), [eslint](), [github](), [github-actions](), [javascript](), [maintainers](), [malware](), [node](), [node-js](), [open-source-security](), [payload](), [persistence](), [scm](), [secrets](), [security](), [snyk-open-source](), [supply-chain](), [supply-chain-security](), [tech](), [vulnerability-insights]() ### AI overview Snyk reports a critical npm supply-chain compromise in which a weaponized binding.gyp file abuses node-gyp during installation to execute malicious code without relying on lifecycle scripts. The worm affects 57 packages, harvests developer and CI/CD credentials, exfiltrates them through GitHub repositories, injects GitHub Actions workflows for persistence, and republishes packages accessible through compromised maintainer accounts. ### Source excerpt A new npm worm is abusing binding.gyp to trigger node-gyp during install, letting malicious packages run code without lifecycle scripts. It steals credentials, persists in GitHub, and self-propagates across maintainers. ## Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection DevFeed: [Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection]() Original publisher: [Read original article]() Author: Brian Vermeer Published: 2026-06-02T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [prompt injection](), [agentic-coding](), [AI-assisted coding](), [Open Source](), [Command-line interface](), [Maven](), [CI/CD](), [payload](), [Claude Code](), [cursor](), [GitHub Copilot]() Tags: [agentic-coding](), [agents](), [ai](), [ai-agents](), [ai-coding](), [article](), [awareness](), [ci-cd](), [claude-code](), [code](), [copilot](), [cursor](), [developer](), [devops](), [github](), [interest](), [java](), [open-source](), [open-source-security](), [payload](), [prompt-injection](), [sandbox](), [scm](), [security](), [security-labs](), [snyk-code](), [snyk-open-source](), [snyk-security-intel](), [supply-chain](), [supply-chain-security](), [testing](), [tools](), [vulnerability-insights]() ### AI overview The article examines jqwik 1.10.0, whose maintainer embedded a prompt injection in test output aimed at AI coding agents. ANSI terminal escape codes concealed the instruction from humans while leaving it visible to tools processing raw logs, creating a supply-chain risk for CI/CD pipelines and agentic coding workflows. ### Source excerpt jqwik 1.10.0 added a hidden prompt injection aimed at AI coding agents, using terminal escape codes to conceal destructive instructions from humans while leaving them readable to logs and tools. ## Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages DevFeed: [Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages]() Original publisher: [Read original article]() Author: Brian Clark Published: 2026-06-01T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Malware](), [npm packages](), [redhat](), [incident](), [GitHub](), [OpenID connect (OIDC)](), [API](), [React](), [Cloud]() Tags: [api](), [article](), [awareness](), [ci-cd](), [cloud-security](), [developer](), [devops](), [devsecops](), [enablement](), [github](), [incident](), [interest](), [npm-packages](), [oidc](), [payload](), [react](), [redhat](), [sbom](), [scm](), [scope](), [secrets](), [security](), [snyk-open-source](), [snyk-security-intel](), [supply-chain](), [supply-chain-security](), [tech](), [vulnerability-insights]() ### AI overview The Miasma supply chain attack compromised at least 32 @redhat-cloud-services npm package releases used by the Red Hat Hybrid Cloud Console. The malicious installation script steals developer and cloud credentials, attempts to spread through packages victims can publish, and may expose secrets on affected workstations and CI runners. ### Source excerpt A supply chain worm dubbed Miasma has been found in dozens of @redhat-cloud-services npm releases. The malicious preinstall hook steals credentials, probes cloud identities, and can republish other packages. ## Laravel Lang Supply Chain Advisory DevFeed: [Laravel Lang Supply Chain Advisory]() Original publisher: [Read original article]() Author: Brian Clark Published: 2026-05-23T16:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Laravel](), [Composer](), [Credential theft](), [Malware](), [PHP](), [passwords](), [ssh](), [CI/CD](), [Cloud](), [Kubernetes](), [GitHub]() Tags: [application-security](), [article](), [awareness](), [ci-cd](), [cloud](), [code](), [credential-theft](), [developer](), [devops](), [devrel](), [github](), [kubernetes](), [laravel](), [php](), [scm](), [secrets](), [security](), [security-labs](), [snyk-open-source](), [snyk-security-intel](), [ssh](), [supply-chain](), [supply-chain-security](), [tech](), [tokens](), [vulnerability-insights]() ### AI overview The article examines a Laravel Lang supply-chain attack in which hundreds of historical Packagist releases for four community-maintained Laravel localization libraries were republished with malicious code. The injected Composer hook executes on PHP requests, downloads a second stage, and runs a credential stealer targeting cloud keys, Kubernetes and Vault secrets, CI/CD tokens, SSH material, environment files, browser data, password-manager vaults, crypto wallets, and messaging tokens. ### Source excerpt Hundreds of historical Laravel Lang Packagist releases were republished with malicious code, putting Composer installs at risk of credential theft and secret exfiltration. ## Malicious node-ipc versions published to npm in suspected maintainer account compromise DevFeed: [Malicious node-ipc versions published to npm in suspected maintainer account compromise]() Original publisher: [Read original article]() Author: Brian Vermeer Published: 2026-05-15T00:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Node.js](), [incident](), [releases](), [CI/CD]() Tags: [article](), [awareness](), [ci](), [ci-cd](), [credential-theft](), [developer](), [devops](), [enablement](), [incident](), [javascript](), [kubernetes](), [node](), [node-js](), [releases](), [scm](), [secrets](), [security](), [security-labs](), [snyk-open-source](), [supply-chain](), [supply-chain-security](), [vulnerability-insights]() ### AI overview Multiple malicious node-ipc versions were published to npm with an obfuscated credential-stealing payload in the CommonJS bundle. The article describes a suspected maintainer-account compromise and advises affected teams to treat exposed secrets as potentially compromised and remediate vulnerable dependency paths. ### Source excerpt On May 14, 2026, multiple malicious versions of the popular npm package node-ipc were published to the npm registry. Current public reporting identifies node... ## TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack DevFeed: [TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack]() Original publisher: [Read original article]() Author: Stephen Thoemmes Published: 2026-05-11T05:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [incident]() Tags: [article](), [attacks](), [cache](), [ci-cd](), [cryptographic](), [developer](), [devops](), [devsecops](), [github](), [github-actions](), [identity](), [incident](), [maintainers](), [memory](), [npm-packages](), [open-source-security](), [sbom](), [scm](), [security](), [snyk-open-source](), [snyk-security-intel](), [supply-chain](), [supply-chain-security](), [teampcp](), [tech](), [toolchain](), [vulnerability-insights](), [workflow]() ### AI overview TanStack's legitimate release pipeline was hijacked to publish malicious npm packages with valid SLSA provenance. The article describes the Mini Shai-Hulud supply-chain attack, its impact, and remediation guidance to rotate secrets on affected install environments. ### Source excerpt On May 11, 2026, the Mini Shai-Hulud worm compromised 84 npm package artifacts across 42 @tanstack/* packages (as well as @squawk/*, @mistralai/* packages, and others) by chaining a GitHub Actions "Pwn Request," cache poisoning, and OIDC token extraction from runner memory -- producing the first npm supply chain attack with valid SLSA Build Level 3 attestations. Here's what happened, what was stolen, and what you need to do right now. ## lightning PyPI Compromise: A Bun-Based Credential Stealer in Python DevFeed: [lightning PyPI Compromise: A Bun-Based Credential Stealer in Python]() Original publisher: [Read original article]() Author: Stephen Thoemmes Published: 2026-04-30T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Malware](), [Python](), [Bun](), [JavaScript](), [GitHub](), [snyk-learn](), [npm](), [releases]() Tags: [article](), [awareness](), [ci-cd](), [code](), [developer](), [devops](), [github](), [javascript](), [open-source-security](), [payload](), [python](), [release](), [sbom](), [secrets](), [security](), [security-labs](), [snyk-learn](), [snyk-open-source](), [snyk-security-intel](), [supply-chain-security](), [tech](), [vulnerability-insights]() ### AI overview A compromised lightning PyPI release downloads the Bun JavaScript runtime at import time and executes an approximately 11 MB obfuscated credential stealer. The article covers the package compromise, Snyk advisory, remediation, and similarities to the preceding Mini Shai-Hulud npm campaign. ### Source excerpt A malicious release of the lightning PyPI package ships a credential-stealing Bun payload that runs on import. Snyk has a live advisory. Here's what's in the package, what to rotate, and how the payload pattern connects to the Mini Shai-Hulud npm campaign one day earlier. ## "A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages DevFeed: ["A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages]() Original publisher: [Read original article]() Author: Stephen Thoemmes Published: 2026-04-29T00:00:00Z Content type: news Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [incident](), [releases]() Tags: [article](), [awareness](), [ci-cd](), [developer](), [devops](), [ecosystem](), [github](), [github-actions](), [incident](), [interest](), [javascript](), [node-js](), [npm-packages](), [open-source-security](), [payload](), [releases](), [sap](), [scm](), [security](), [snyk-open-source](), [snyk-security-intel](), [supply-chain](), [supply-chain-security](), [tech](), [tool](), [toolchain](), [vulnerability-insights]() ### AI overview A supply-chain attack compromised four npm packages in the SAP development ecosystem. Malicious releases download Bun and execute an obfuscated credential stealer, while SAP published clean post-incident versions and Snyk issued advisories. ### Source excerpt A new npm supply chain attack self-branded "Mini Shai-Hulud" compromised four SAP-ecosystem packages on April 29, 2026. Snyk has live advisories. Here's the technical breakdown, IOCs, and what to do. ## Don't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478) DevFeed: [Don't Panic: The Thymeleaf Template Injection That Only Hurts If You Let It (CVE-2026-40478)]() Original publisher: [Read original article]() Author: Brian Vermeer Published: 2026-04-29T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Vulnerabilities](), [Security]() Tags: [application-security](), [article](), [developer](), [external](), [java](), [payload](), [security](), [snyk-open-source](), [spring](), [spring-boot](), [vulnerability](), [vulnerability-insights]() ### AI overview This article explains that CVE-2026-40478 is a severe Thymeleaf server-side template injection vulnerability, but exploitation depends on user-controlled input reaching Thymeleaf's expression engine. It describes the sandbox bypass, the potential for remote code execution, and misuse patterns such as dynamic templates and view resolution. It recommends patching to Thymeleaf 3.1.4 or later and auditing applications for these conditions. ### Source excerpt CVE-2026-40478: The Thymeleaf template injection (CVSS 9.1) is conditional. Patch to 3.1.4+ immediately, and audit your code for dynamic view or template expression misuse, which is the key precondition for exploitability. ## Governing Security in the Age of Infinite Signal - From Discovery to Control DevFeed: [Governing Security in the Age of Infinite Signal - From Discovery to Control]() Original publisher: [Read original article]() Author: Randall Degges Published: 2026-04-10T00:00:00Z Content type: article Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [Security](), [Securing AI](), [ai security](), [Artificial Intelligence](), [anthropic](), [Vulnerabilities](), [Responsibility & Safety]() Tags: [ai](), [ai-security](), [anthropic](), [application-security](), [article](), [automation](), [autonomous](), [awareness](), [devops](), [devsecops](), [enablement](), [engineering](), [executive](), [finserv](), [interest](), [production](), [security](), [snyk-platform](), [snyk-security-intel](), [supply-chain-security](), [tech](), [vulnerabilities](), [vulnerability-insights]() ### AI overview Anthropic's AI-driven vulnerability discovery systems can uncover software flaws at unprecedented scale, but increased capability also expands risk. The article argues that enterprise security must move from detection to control through deterministic validation, prioritization, remediation automation, and governance. ### Source excerpt AI can find vulnerabilities at scale, but enterprise security now depends on control, validation, and governance that can keep up. ## Secure What Matters: Scaling Effortless Container Security for the AI Era DevFeed: [Secure What Matters: Scaling Effortless Container Security for the AI Era]() Original publisher: [Read original article]() Author: Pratip Banerji; Brendan Hann Published: 2026-04-07T04:00:00Z Content type: release Language: en Sources: [Blog RSS Feed | Snyk]() Topics: [container-security](), [snyk-container](), [Containers](), [vulnerability](), [Deployment](), [CI/CD](), [Command-line interface](), [Artificial Intelligence]() Tags: [ai](), [americas](), [awareness](), [blog](), [ci-cd](), [cli](), [container-security](), [containers](), [deployment](), [developer](), [devops](), [devsecops](), [docker](), [engineering](), [go](), [interest](), [security](), [snyk-container](), [snyk-platform](), [tech](), [vulnerability](), [vulnerability-insights]() ### AI overview Snyk announces the general availability of Container Registry Sync, which automates the discovery, scanning, and pruning of container images. The article also previews a unified product experience for managing container-image risk across CLI, CI/CD, and registries. ### Source excerpt Announcing Snyk Container Registry Sync GA for automated image management and runtime intelligence. Scale container security effortlessly for the fast-paced AI era. [Next page]()