Tag

Open Source

4 stories since Sep 2025.

4: stories
MAY 17: latest

Grey building facade with angled box-shaped panels tilted out at night

Grafana Investigating Token Compromise and Extortion Attempt

An “unauthorized party” obtained a token with access to the Grafana Labs GitHub environment and downloaded Grafana’s codebase.

LINDSEY O'DONNELL-WELCH · MAY 17 · 2 min

Building facade of grey tilted panels and dark windows, lit purple at the base

Supply Chain

Attackers Target Checkmarx KICS Ecosystem

LINDSEY O'DONNELL-WELCH · APR 22 · 3 min

Supply Chain

GitHub Aims to Improve npm Security After Malware Campaigns

LINDSEY O'DONNELL-WELCH · SEP 23 · 4 min

All Open Source

SEP 8

Intrusions

Attack Compromises Popular NPM Packages

The affected packages include Chalk and Debug, and one of the contributors to those packages said the compromise was the result of him clicking on a phishing email related to setting up 2FA on his account.

Dennis Fisher · 4 min