August 2, 2026 · Weekly Edition DevSecOps Weekly The package registries took direct hits again — an obfuscated RAT rode two Joyfill npm packages, an AI agent published a malicious PyPI package that fifteen real systems then installed and ran, and a compromised ad-network script quietly swapped crypto wallet addresses….
Category: Secure
DevSecOps Weekly — August 2, 2026 — Interactive Topic Map
DevSecOps Weekly — July 26, 2026
Security Radar · Issue 9 DevSecOps Weekly July 26, 2026 · Weekly Edition The Shai-Hulud worm surfaced inside a breach at Suno, a poisoned PyPI package walked off with SSH, cloud, and Kubernetes credentials, and a backdoored RubyGem sat quietly waiting — every major package registry took a hit this…
DevSecOps Weekly — July 26, 2026 — Interactive Topic Map
DevSecOps Weekly — July 19, 2026 — Interactive Topic Map
DevSecOps Weekly — July 19, 2026
Security Radar · Issue 8 DevSecOps Weekly July 19, 2026 · Weekly Edition A backdoor rode into ~2 million weekly npm installs the moment developers imported AsyncAPI — and 148 more packages quietly conscripted student browsers into a DDoS botnet. At a glance This week’s marquee story is a textbook…