cloud-security
+4
Aug 25, 2026
•
7 min read
It asks your server what tools it has, then uses the one that runs commands. No bug, no patch.
Aug 11, 2026
6 min read
TeamCity handed XStream a list of allowed classes. XStream added it to the ones it already allowed.
CI/CD
Jul 21, 2026
4 min read
AsyncAPI's own release pipeline published five npm versions with malware in them, each with valid provenance.
