Tag: sdlc

1 article

Cluttered developer workstation with laptop, notes, and empty cans amidst computer hardware and dusty books.

Supply Chain Attacks Target SDLC's Overlooked Corners

Meet the ChainDrop npm worm, a sneaky threat that infiltrated over 400 packages, including popular libraries like keyv and cacheable-request, by hiding in plain sight within routine developer workflows. This highly evasive threat uses a three-step chain to steal sensitive tokens and secrets, spreading its reach with alarming ease.

Analyst 207