GlassWorm: Invisible-Code Supply Chain Worm Attack
GlassWorm: The Invisible Unicode Supply Chain Worm Targeting CI/CD Pipelines Date Observed: October 2025 – ongoing (March 2026) Ecosystem: VS
March 30, 2026
GlassWorm: The Invisible Unicode Supply Chain Worm Targeting CI/CD Pipelines Date Observed: October 2025 – ongoing (March 2026) Ecosystem: VS
SANDWORM_MODE: A New Wave of npm Supply Chain Attacks Targeting CI/CD Pipelines Date of Discovery: February 20, 2026 Ecosystem: npm
Hackerbot-Claw: AI-Driven Pull Request Exploits in GitHub Actions CI/CD Date Observed: Late February 2026 Ecosystem: GitHub Actions CI/CD Attack Type:
The nx “s1ngularity” Attack: Weaponizing AI CLI Tools and How InvisiRisk Stops It Date of Attack: August 26, 2025 Impact:
Shai-Hulud NPM Worm Attack: Overview and InvisiRisk Protection A novel self-propagating malware strain dubbed the Shai-Hulud worm has recently infected
The Great NPM Heist: What Happened and How InvisiRisk Protects You In early September 2025 attackers orchestrated a large-scale supply
Git’s Silent Takeover: How a Simple Clone Command Can Compromise Your Entire System (CVE-2025-48384) In the world of software development,
GitHub’s “Pwn Request” Misconfiguration: How InvisiRisk BAF Shields Your CI/CD from Hidden Threats The automation prowess of GitHub Actions, a
Next.js Middleware Vulnerability (CVE-2025-29927): How InvisiRisk BAF Provides Real-Time Protection Introduction In the ever-evolving landscape of web development, security remains
How InvisiRisk BAF Effectively Mitigates GitHub Actions Supply Chain Attacks Like the Ultralytics Attack Introduction The rise of automation in