Ci cd

Developer Tools 6 min npm v12 Is Here, and It Turns Off a Default That Has Run Arbitrary Code for a Decade npm v12 went generally available on 8 July, flipping install scripts, Git dependencies and remote-URL packages... KE Kenji Tanaka 11 Jul Developer Tools 5 min npm v12 Flips Three Install Defaults From Automatic to Opt-In — Prepare Your Pipelines Now GitHub's npm v12, due July 2026, turns three things npm install does automatically today into choices you have... KE Kenji Tanaka 19 Jun Developer Tools 7 min Miasma: How a Hijacked CI Pipeline Shipped Malicious npm Packages With Valid Provenance The Miasma supply-chain attack didn't typosquat or steal an npm token — it hijacked a maintainer's CI pipeline... KE Kenji Tanaka 8 Jun Cybersecurity 12 min Megalodon Campaign Backdoors 5,561 GitHub Repos in Six Hours — Inside a Mass GitHub Actions Supply-Chain Attack An automated campaign called Megalodon pushed 5,718 malicious commits to 5,561 GitHub repos on 18 May 2026, ex... CY Cyber Team 23 May Developer Tools 9 min GitHub Enterprise Server Flaw CVE-2026-3854 Lets Users With Push Access Execute Code — Patch Now CVE-2026-3854, a high-severity flaw in GitHub Enterprise Server (CVSS 8.7), let any user with push access run... CY Cyber Team 8 May