step-security/dev-machine-guard

@ethersphere/bee-js 13.3.0 Compromised
2026-11-09 · stepsecurity.io

CVE-2026-123158 (*sshole): OpenSSH Password Authentication Bypass on Alpine Linux
2026-11-06 · stepsecurity.io

CVE-2026-109518: apt Flaw Lets Attackers Swap Packages After Verification and Run Code as Root
2026-11-05 · stepsecurity.io

Malicious Files: Find What Supply Chain Attacks Leave Behind in Your GitHub Repositories and on Developer Machines
2026-11-04 · stepsecurity.io

Binance’s $6.34 Billion Hack: Developer Machines, AI Tooling, and Wallet Signing
2026-11-03 · stepsecurity.io

Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines
2026-11-01 · stepsecurity.io

GitHub Actions Native Egress Firewall vs. Harden-Runner: Five Differences That Matter
2026-10-28 · stepsecurity.io

StepSecurity Now Inventories AI Agent Plugins in Your GitHub Repositories and on Developer Machines
2026-10-27 · stepsecurity.io

litellm 1.107.0 Compromised on PyPI and Docker: Credential Stealer and Hourly Remote Code Loader
2026-10-26 · stepsecurity.io

OVHcloud CLI Compromised via GitHub Release Swap: Detonating the Real GlassWorm Loader and What We Found
2026-10-24 · stepsecurity.io

eMudhra / emSign CA Compromise: What Python, pip, and CI/CD Users Need to Update
2026-10-22 · stepsecurity.io

OpenCode Security Breach: Distillation Attack Hit Console Users With Linked AI Providers. How to Find OpenCode on Developer Machines and Respond
2026-10-18 · stepsecurity.io

GhostAction Returns: Malicious “Security Audit” Workflows Now Mine Credentials from Entire Git Histories