Editorial
Articles on Editorial from the Attestd team. Security context, API design, and engineering.
EditorialI Asked Claude to Stress-Test My Own Product. It Accidentally Proved Why the Product Needs to Exist.
I tested my own security API anonymously using Claude. The vulnerability data held up. Claude hallucinated my pricing page twice.
Robert7 min read
EditorialJADEPUFFER: AI agent ran autonomous ransomware via Langflow
The first fully autonomous AI ransomware attack used CVE-2025-3248 in Langflow. Attestd was returning risk_state critical before the attack ran.
Robert8 min read
EditorialChai npm brandjacking campaign: 25 packages, 11 weeks
Original research: 25 malicious npm packages brandjacking the Chai assertion library, spanning 11 weeks. Live API data, full timeline, no public disclosure.
Robert9 min read
EditorialVS Code Fake Font malware: npm supply chain attack 2026
North Korean hackers hid malware inside a VS Code task. Opening a folder executed it. Attestd flagged both npm packages five days before disclosure.
Robert7 min read
Editorial@mastra npm supply chain attack: 90+ packages, no CVEs
North Korean hackers compromised 90+ @mastra npm packages in June 2026. Every package passed a CVE check clean. Here is what the supply chain signal looks like.
Robert9 min read
EditorialThree Supply Chain Attacks. Three Different Vectors. One Defensive Primitive.
CI/CD hijack, dormant maintainer account, git tag rewriting. Three completely different attack vectors in 12 days. Identical detection primitive for all three.
Robert5 min read
EditorialShai-Hulud Returns: 600 npm Packages Compromised, @antv Ecosystem Hit
A new Shai-Hulud wave compromised 600+ npm packages in the @antv ecosystem. SLSA bypass confirmed again. risk_state is none. A supply chain registry catches it.
Robert5 min read
Editorialnode-ipc Was Compromised via a Dormant Maintainer Account. 690,000 Weekly Downloads.
node-ipc versions 9.1.6, 9.2.3, and 12.0.1 contain a credential-stealing payload. risk_state is none. The only signal is supply_chain.compromised: true.
Robert5 min read
EditorialAn Autonomous AI Found an 18-Year-Old nginx Bug in Six Hours
CVE-2026-42945 is a CVSS 9.2 heap buffer overflow in nginx present for 18 years. An autonomous AI scanner found it in six hours. DoS is confirmed. Patch now.
Robert4 min read
EditorialPCPJack Is Scanning Your Docker, Redis, and MongoDB Instances for Credentials
PCPJack is a new credential-theft framework targeting exposed Docker, Kubernetes, Redis, and MongoDB. All four are covered by Attestd.
Robert5 min read
Editorialvm2 Was Abandoned After a CVSS 10.0 Sandbox Escape. Millions of Projects Still Depend on It.
Attestd now covers vm2, Node.js, Deno, and Hermes. The vm2 sandbox was abandoned after back-to-back critical CVEs. Here's what the data shows across all four.
Robert5 min read
Editorialelementary-data 0.23.3 Was Compromised for 48 Hours Before Anyone Noticed
elementary-data 0.23.3 was backdoored via GitHub Actions injection on April 24. No CVE exists.
Robert6 min read
EditorialThe Same Threat Actor Who Compromised LiteLLM Just Hit Bitwarden
TeamPCP compromised Bitwarden CLI on npm April 22. The same actor hit LiteLLM on March 24. Here is the campaign pattern and what to check.
Robert6 min read
EditorialThe LiteLLM attack and the two security layers your AI agent stack is missing
The LiteLLM supply chain attack exposed a gap most AI agent developers haven't thought about. Here's what happened.
Robert6 min read