[ORGANIZATION]
Tensorlake
Featured in 3 tracked stories · first seen
Situations
Software supply chain security vulnerabilities
3 clusters · 7 sources · last updated
Latest: Security researchers highlight risks in npm and pnpm package execution
Security researchers have identified several significant software supply-chain vulnerabilities and malicious campaigns targeting developers through the npm registry and GitHub. Initial findings detailed the MALFEX campa
Escalating global cybersecurity threats and risks for SMEs
20 clusters · 81 sources · last updated
Latest: Cybersecurity threats target small businesses and software supply chains
Cybersecurity threats to small and medium-sized enterprises (SMEs) continue to escalate globally. While a Clusit 2025 report previously noted a 42% increase in attacks, recent data from Kaspersky indicates that 86% of SM
Software supply-chain attacks targeting developers
2 clusters · 12 sources · last updated
Latest: Malicious npm and PyPI package releases target developer credentials
Cybersecurity researchers have identified multiple supply-chain attacks targeting developer environments through malicious packages on the npm and PyPI registries. An initial campaign named NEBULA utilized npm packages