Ci cd

Developer Tools 6 min npm v12 Is Here, and It Turns Off a Default That Has Run Arbitrary Code for a Decade npm v12 went generally available on 8 July, flipping install scripts, Git dependencies and remote-URL packages... KE Kenji Tanaka 11 Jul Developer Tools 5 min npm v12 Flips Three Install Defaults From Automatic to Opt-In — Prepare Your Pipelines Now GitHub's npm v12, due July 2026, turns three things npm install does automatically today into choices you have... KE Kenji Tanaka 19 Jun Developer Tools 7 min Miasma: How a Hijacked CI Pipeline Shipped Malicious npm Packages With Valid Provenance The Miasma supply-chain attack didn't typosquat or steal an npm token — it hijacked a maintainer's CI pipeline... KE Kenji Tanaka 8 Jun Cybersecurity 12 min Megalodon Campaign Backdoors 5,561 GitHub Repos in Six Hours — Inside the Largest GitHub Actions Supply-Chain Attack on Record An automated campaign called Megalodon pushed 5,718 malicious commits to 5,561 GitHub repos between 18-21 May... CY Cyber Team 21 May Developer Tools 9 min Critical GitHub RCE Flaw CVE-2026-3854 Lets Attackers Execute Code With a Single Git Push — Patch Now CVE-2026-3854, a CVSS 9.8 RCE flaw in GitHub Enterprise Server, allows unauthenticated code execution via a si... CY Cyber Team 8 May