Posts (page 2)
Shai-Hulud is back: an npm worm loots the AntV ecosystem
Shai-Hulud is back. This self-replicating npm worm hit Alibaba's AntV ecosystem on 19 May 2026: it reads GitHub Actions runner memory, steals 130 types of secrets and plants backdoors in Claude Code. I checked my own package-lock.json, here is what I found and what to do.
Read the article
GitHub Actions 2026: what the new security roadmap really changes
GitHub has published its 2026 security roadmap for Actions. Dependency locking, policies, scoped secrets, Actions Data Stream and an egress firewall answer a reality made visible by Trivy, Checkmarx/KICS and Bitwarden CLI: CI/CD is now a critical attack surface.
Read the article
Checkmarx/KICS compromised: when security scanners become the attack surface
After Trivy, the Checkmarx/KICS incident confirms that security scanners running in CI/CD pipelines are critical dependencies to confine.
Read the article
Argo CD + Kyverno: the GitOps policy as code your cluster was missing
Deploy Kyverno with Argo CD to enforce Kubernetes security policies in GitOps. App-of-Apps pattern, admission policies, audit vs enforce, supply chain impact.
Read the article
The Trivy affair, Act IV, Aqua finally spoke and here is what it changes
Aqua Security published its technical analysis of the Trivy supply chain attack. Forensic tag poisoning, three-stage payload, ICP blockchain persistence.
Read the article
Trivy compromised, Chainguard offers 12 free months and a supply chain lesson
After the March 2026 Trivy incident, Chainguard offers 12 months of free Trivy images. The real lesson: an independent build chain limits the damage.
Read the article
KICS and LiteLLM compromised: two supply chain attacks that confirm a change of scale
After Trivy, new compromises hit the KICS GitHub Action and LiteLLM PyPI packages. Attack vectors, malware behaviour, impact and what to do.
Read the article
Trivy compromised a second time with a poisoned v0.69.4 release
Three weeks after the initial attack, Trivy suffered a second incident: poisoned v0.69.4 release spread via Homebrew, registries and GitHub Actions.
Read the article
GitHub Actions: 15 security pitfalls that expose your pipelines
In 2025, attacks like Shai Hulud v2, GhostAction and tj-actions/changed-files compromised tens of thousands of repositories through GitHub Actions. The cause? Always the same mistakes: mutable tags, overly broad permissions, command injection, misused pull_request_target. This article reviews 15 exploited pitfalls, the still immature tooling ecosystem, and gives you the fixes to harden your pipelines.
Read the article
Trivy wiped out after a supply chain attack by an AI bot
This Sunday, while installing Trivy through mise, I hit a 404 error. The aquasecurity/trivy GitHub repository was empty. What I took for a bug turned out to be a supply chain attack: an autonomous AI bot compromised a PAT, deleted every release, renamed the repository and published a malicious VS Code extension. Full timeline and lessons.
Read the article