durabletask 1.4.1–1.4.3 on PyPI are malicious. 417k monthly downloads. Runs credential theft on import — AWS, Azure, GCP, K8s, Vault, 1Password, Bitwarden. Pin to 1.4.0 now. Full advisory + IOCs: www.endorlabs.com/learn/trojan... #SupplyChainSecurity #ThreatIntel

Endor Labs and Chaingaurd are partnering to deliver end-to-end software supply chain security. Read more about what the integration delivers www.endorlabs.com/learn/endor-...

Endor Labs detected 600+ malicious package versions forging valid Sigstore provenance. If you installed affected packages May 19, rotate all credentials now. 37 @antv/* packages. 27 minutes. One stolen token. Full IOC list: www.endorlabs.com/learn/mini-s... #ShaiHulud

AI coding agents now install packages, run commands, and call external services, autonomously. Zero visibility for most security teams. Today we launched Agent Governance + Package Firewall to secure this: www.endorlabs.com/learn/introducing-security-for-ai-coding-agents-and-workstations

84 @tanstack npm packages compromised today. 12M+ weekly downloads at risk. 2FA didn't stop it. Rotate your creds. Don't install @tanstack/* yet. Full IoCs + mitigations in our blog: www.endorlabs.com/learn/shai-h...

Two versions of lightning, a widely used Python package for building and training ML models, have been compromised in a new software supply chain attack. Affected: v2.6.2 and 2.6.3 Reach: ~8M downloads/month Status: Quarantined www.endorlabs.com/learn/popula...

4 SAP npm packages weaponized today: mbt, @cap-js/sqlite, @cap-js/postgres, @cap-js/db-service. Steals GitHub/AWS/GCP/Azure tokens + AI tool configs. Self-replicating worm. Persists via VS Code & Claude Code hooks. www.endorlabs.com/learn/mini-shai-hulud-npm-worm-hits-sap-developer-packages

GPT-5.5 just set a new security record on our Agent Security League, through Cursor. Through Codex? Ties for third on security, and trails by ~26 points on functional correctness. Same model, same week, two harnesses, two very different results: www.endorlabs.com/learn/gpt-5-...

Attackers named it "Shai-Hulud: The Third Coming", and delivered: the @bitwarden/cli supply chain attack recycled the same npm worm, targeted AI coding agents, and harvested developer secrets from machines and CI alike. Analysis: www.endorlabs.com/learn/shai-h...

NEW: We benchmarked every major AI coding agent for security. 🔑>80% of AI-generated code that works still has vulnerabilities 🔑Security scores have barely improved, even as functional ability soars 🔑Best security score across all agents: just 17.3% Full leaderboard: endorlabs.com/research/ai-...

One missed auth check on a WebSocket = full shell. The #Marimo vuln (CVE-2026-39987) was exploited in ~10 hours. Upgrade to 0.23.0+, enforce auth on every WebSocket, and keep terminals off the public internet, WebSockets don’t inherit security. www.endorlabs.com/learn/root-i...

92% of all npm account takeover advisories ever recorded landed in 2025. In our new malware report (OSV + npm): -Advisories up ~14x in 2 years -Packages see 10k–100k+ monthly downloads -Maintainers compromised, updates turn malicious endorlabs.com/research-report/2026-open-source-malware-research

#Axios was compromised on npm. Versions 1.14.1 & 0.30.4 dropped a RAT via postinstall. No obvious breakage. With 400M+ monthly downloads, impact could be broad. If installed, treat as incident. Full analysis + IoCs www.endorlabs.com/learn/npm-ax...

TeamPCP is escalating: open source tools → LiteLLM → now Telnyx Python packages We’re offering: • Access to researchers tracking IoCs • Free scans for GitHub Actions + malicious deps www.endorlabs.com/learn/teampc...

#GlassWorm compromised an #npm maintainer account, pushing 3 waves of malware across packages with 134K monthly downloads. Endor Labs tracked 11 compromised versions across 4 packages and mapped the full infection chain + IoCs. www.endorlabs.com/learn/npm-is...

Endor Labs flagged a follow-on supply chain attack <20h after initial reports. After malicious releases in [email protected] and [email protected] were pulled, new versions dropped with identical payloads + new deps in 43 mins. Attacker still active.

Joe Sullivan (former CSO at Uber, Facebook, and Cloudflare) is leading a fireside chat at RSAC. StackHawk is co-hosting with @endorlabs.bsky.social, Cyberhaven, and Brinqa. Learn more and RSVP here: www.endorlabs.com/events/ciso-...

#PhantomRaven is back 👻🐦‍⬛ We found 3 new waves distributing 88 #maliciouspackages (81 still live on npm). Packages look clean, but a hidden URL in package.json pulls credential-stealing malware. www.endorlabs.com/learn/return...

AURI by Endor Labs is built for the AI-SDLC where agents write, review, and ship code. Learn more: www.endorlabs.com/learn/introducing-auri-security-intelligence-for-ai-coding-agents-and-developers

A critical entity encoding bypass affects fast-xml-parser (40M+ weekly npm downloads). www.endorlabs.com/learn/cve-20...

Today we're announcing Container Reachability, delivering full-stack reachability across application and base layers. www.endorlabs.com/learn/introducing-full-stack-reachability-container-scanning-that-actually-reduces-noise #ContainerSecurity #DevSecOps #FedRAMP

AI is great at copying homework, including the mistakes. A 2025 study found: ❌ 15/20 AI snippets had design flaws ❌ 6/20 were invisible to security tools AI follows patterns, not logic, effectively amplifying your code's existing flaws. Read the full research: www.endorlabs.com/learn/design...

Rubrik used Endor Labs to confirm they weren’t affected by a major npm attack in ~30 minutes.

101 fake font packages. 4.3 petabytes transferred. Zero malware. This wasn’t a supply-chain attack. npm was quietly used as a CDN at massive scale. Henrik Plate explains how it happened and why abuse, not just malware, is becoming a serious OSS sustainability risk. endorlabs.com/learn/how-fa...

Gemini CLI @endorlabs.bsky.social Extension github.com/endorlabs/ge...

We discovered a critical pgAdmin vulnerability (CVE-2025-13780): whitespace bypassed a regex meant to block dangerous psql meta-commands. A great example of why regex is fragile for input validation. Deep dive: www.endorlabs.com/learn/when-r...

A patch in Argo Workflows was supposed to fix a ZipSlip issue… but it didn’t. Our research uncovered CVE-2025-66626 — a validation bug that let malicious tarballs escape the working directory and reach RCE. Full write-up: www.endorlabs.com/learn/when-a...

Shai Hulud’s latest wave shows cross-ecosystem spread: an infected posthog-node package was rebundled as a Java archive and pushed to Maven Central via mvnpm. Version 4.18.1 is removed, and other rebundles appear clean. Key point: malware is now moving between ecosystems automatically.

Shai-Hulud shows how fast npm worms can move through packages, CI workflows, and maintainer accounts. Shared code speeds development, and expands the impact of compromised creds. Full breakdown from Robert Haynes: www.endorlabs.com/learn/unders... #ShaiHulud #Malware

A new Shai-Hulud variant just escalated from stealing credentials to attempting to wipe the entire home directory when exfiltration fails. If you use npm: audit your packages, remove bad versions, rotate tokens, and inspect every workflow. www.endorlabs.com/learn/shai-h... #ShaiHulud #malware

Wednesday was a double dose of baseball! ⚾ From Braves vs. White Sox in Atlanta to Cubs vs. Brewers in Chicago, we had a great time enjoying the games with our partners at @endorlabs.bsky.social A big thank you to everyone who joined us! #AppSec #DevOps

The @endorlabs.bsky.social + @stackhawk.bsky.social integration connects SAST + DAST for one correlated finding. Less noise. Real context. Faster fixes. 🔗 www.stackhawk.com/blog/endor-l...

Endor Labs’ 2025 State of Dependency Management report is live! -49% of dependencies imported by AI agents had known vulns. -34% didn’t exist at all. -Only 1 in 5 was safe. www.endorlabs.com/lp/state-of-... #MCP #AIAgents #DMR2025

🔔 Update on the ongoing "Shai-Hulud" malware campaign The Endor Labs security research team has identified more than 550+ packages and versions affected by the ongoing "Shai-Hulud" software supply chain attack targeting the npm registry. www.endorlabs.com/learn/npm-ma...

AI is changing how software gets built. Today, we’re changing how it gets secured with the expansion of our application security platform and a $93M Series B to accelerate what we’re building. More here: bit.ly/42DqUmB #AppSec #SeriesB #EndorLabs #DevSecOps #Cybersecurity

Developers are moving faster than ever with tools like GitHub Copilot. The result? 62% of AI-generated code has flaws Nearly 30% contains known security weaknesses Next week, we’re announcing a new way for AppSec teams to understand what’s changing and why it matters. #AppSec #AI #LLM #DevSecOps

OWASP OSS Risk 2: Explore the compromise of legitimate open-source packages, with an in-depth case study of the tj-actions/changed-files GitHub Action supply chain attack. www.endorlabs.com/learn/owasp-... #OSSRisk #OWASPOSSRisk #tjactions

Attackers compromised tj-actions/changed-files, used by 23,000+ repos, injecting malicious code to steal CI/CD secrets. What you need to know and how to mitigate: www.endorlabs.com/learn/github...

Less than 9.5% of vulnerabilities are actually exploitable, but FedRAMP ConMon requires fixing everything. With Endor Labs, you can: - Prove false positives to your 3PAO - Correlate SCA & container scans - Patch vulnerabilities 6.2x faster with Endor Patches www.endorlabs.com/landing-page...

The latest CISO guide from The Hacker News makes it clear - EU AI Act, ISO 42001, and NIST AI RMF all require it. But inventory is just the start. You also need to enforce AI policies. Endor Labs can help you there. About CLEAR framework: thehackernews.com/2025/02/how-... #AI #AppSec #DevSecOps

Endor Labs ❤️ GitHub Context switching is a productivity killer. Developers live on GitHub, so #AppSec should too. With Endor Labs Reachability-based SCA now integrated into GHAS, teams can get best-in-class application security, all in one place. github.blog/security/fro...

DeepSeek R1 is the latest open source AI model to generate a lot of buzz. Developers are trying it out, and AppSec teams may be wondering about risks. Endor Labs can give AppSec teams data and tools to make and enforce decisions about acceptable AI risk from DeepSeek R1. #DeepSeek #AIModels #SCA

On Dec 13, Semgrep's license changes limited access to key security tools and community rules. Enter Opengrep: a fully open source, drop-in replacement backed by 10+ security companies. Key benefits: no paywalls, community rules accessible, foundation governance, and easy migration!

Curious to know—how often do AppSec and CloudSec work together? Share your thoughts in the comments! a) Often, we're the same team! b) Sometimes, depending on work c) Lol, who?

Big news! 🎉 Microsoft has natively integrated our advanced SCA within Defender for Cloud. Our integration is in Public Preview and available to try now! www.endorlabs.com/learn/micros...