Editorial
Articles on Editorial from the Attestd team. Security context, API design, and engineering.
EditorialSupply chain compromise vs CVE: why `risk_state: none` does not mean safe
A package can have no CVE and still be malicious. Learn why CVE risk and supply chain compromise require independent security signals.
Robert8 min read
EditorialHow to audit your npm dependencies in 30 minutes
A practical 30-minute npm dependency audit covering CVE scanning, lockfile inspection, supply chain compromise checking, typosquat detection, and CI
Robert7 min read
EditorialWhy CVSS scores mislead autonomous systems
CVSS measures theoretical severity. Only 2.3% of CVSS 7+ vulnerabilities get exploited. 28% of exploited CVEs score medium. Here is what systems need instead.
Robert8 min read
EditorialWhat every developer should know about dependency security
CVE scanners miss supply chain attacks. Lockfiles are not guarantees. AI tools introduce new vectors. Here is what dependency security requires in 2026.
Robert6 min read
Editorialnpm supply chain attacks: how they work and how to detect them
Three attack vectors, no CVEs on any of them. How account takeover, dependency confusion, and slopsquatting work in 2026 and what detection actually requires.
Robert8 min read
EditorialThe state of npm supply chain security in 2026
454,600 new malicious packages in 2025. Nation-state actors. Self-propagating worms. Blockchain C2. Valid provenance on compromised packages.
Robert7 min read
EditorialSlopsquatting: when AI coding assistants invent package names attackers are waiting to claim
AI models hallucinate package names at a 5.2% rate. 43% repeat on every run. Attackers register those exact names. Here is how slopsquatting works.
Robert8 min read
EditorialI Asked Claude to Stress-Test My Own Product. It Accidentally Proved Why the Product Needs to Exist.
I tested my own security API anonymously using Claude. The vulnerability data held up. Claude hallucinated my pricing page twice.
Robert7 min read
EditorialJADEPUFFER: AI agent ran autonomous ransomware via Langflow
The first fully autonomous AI ransomware attack used CVE-2025-3248 in Langflow. Attestd was returning risk_state critical before the attack ran.
Robert8 min read
EditorialChai npm brandjacking campaign: 25 packages, 11 weeks
Original research: 25 malicious npm packages brandjacking the Chai assertion library, spanning 11 weeks. Live API data, full timeline, no public disclosure.
Robert9 min read
EditorialVS Code Fake Font malware: npm supply chain attack 2026
North Korean hackers hid malware inside a VS Code task. Opening a folder executed it. Attestd flagged both npm packages five days before disclosure.
Robert7 min read
Editorial@mastra npm supply chain attack: 90+ packages, no CVEs
North Korean hackers compromised 90+ @mastra npm packages in June 2026. Every package passed a CVE check clean. Here is what the supply chain signal looks like.
Robert9 min read
EditorialThree Supply Chain Attacks. Three Different Vectors. One Defensive Primitive.
CI/CD hijack, dormant maintainer account, git tag rewriting. Three completely different attack vectors in 12 days. Identical detection primitive for all three.
Robert5 min read
EditorialShai-Hulud Returns: 600 npm Packages Compromised, @antv Ecosystem Hit
A new Shai-Hulud wave compromised 600+ npm packages in the @antv ecosystem. SLSA bypass confirmed again. risk_state is none. A supply chain registry catches it.
Robert5 min read
Editorialnode-ipc Was Compromised via a Dormant Maintainer Account. 690,000 Weekly Downloads.
node-ipc versions 9.1.6, 9.2.3, and 12.0.1 contain a credential-stealing payload. risk_state is none. The only signal is supply_chain.compromised: true.
Robert5 min read
EditorialAn Autonomous AI Found an 18-Year-Old nginx Bug in Six Hours
CVE-2026-42945 is a CVSS 9.2 heap buffer overflow in nginx present for 18 years. An autonomous AI scanner found it in six hours. DoS is confirmed. Patch now.
Robert4 min read
EditorialPCPJack Is Scanning Your Docker, Redis, and MongoDB Instances for Credentials
PCPJack is a new credential-theft framework targeting exposed Docker, Kubernetes, Redis, and MongoDB. All four are covered by Attestd.
Robert5 min read
Editorialvm2 Was Abandoned After a CVSS 10.0 Sandbox Escape. Millions of Projects Still Depend on It.
Attestd now covers vm2, Node.js, Deno, and Hermes. The vm2 sandbox was abandoned after back-to-back critical CVEs. Here's what the data shows across all four.
Robert5 min read
Editorialelementary-data 0.23.3 Was Compromised for 48 Hours Before Anyone Noticed
elementary-data 0.23.3 was backdoored via GitHub Actions injection on April 24. No CVE exists.
Robert6 min read
EditorialThe Same Threat Actor Who Compromised LiteLLM Just Hit Bitwarden
TeamPCP compromised Bitwarden CLI on npm April 22. The same actor hit LiteLLM on March 24. Here is the campaign pattern and what to check.
Robert6 min read
EditorialThe LiteLLM attack and the two security layers your AI agent stack is missing
The LiteLLM supply chain attack exposed a gap most AI agent developers haven't thought about. Here's what happened.
Robert6 min read