cloud-security
+4
Aug 11, 2026
•
6 min read
TeamCity handed XStream a list of allowed classes. XStream added it to the ones it already allowed.
CI/CD
Jul 21, 2026
4 min read
AsyncAPI's own release pipeline published five npm versions with malware in them, each with valid provenance.
