https://headlines.subcloak.com/2026-11-06T18:26:40Z https://headlines.subcloak.com/h/h-2026-0035/attackers-use-ai-agents-to-find-secrets-leaked-on-github-and-abuse-them/2026-11-06T18:26:40Z https://headlines.subcloak.com/h/h-2026-0034/github-and-osv-flag-20-npm-packages-with-baileys-in-their-names-as-malware/2026-11-06T18:24:41Z https://headlines.subcloak.com/h/h-2026-0033/cpguard-update-channel-hijacked-to-push-a-data-stealing-script-to-linux-servers/2026-11-05T03:09:15Z https://headlines.subcloak.com/h/h-2026-0030/hidden-loaders-found-in-12-releases-of-10-hijacked-npm-packages/2026-11-06T18:25:23Z https://headlines.subcloak.com/h/h-2026-0020/github-flags-npm-package-vas-tops2-core-property-search-as-malware/2026-11-05T03:09:12Z https://headlines.subcloak.com/h/h-2026-0014/github-flags-npm-package-greenlake-common-context-as-malware/2026-11-05T03:09:11Z https://headlines.subcloak.com/h/h-2026-0013/github-flags-npm-package-ppa-web-components-ppa-banner-as-malware/2026-11-05T03:09:09Z https://headlines.subcloak.com/h/h-2026-0010/six-npm-packages-under-an-internal-looking-ecg-internal-scope-beacon-out-host/2026-11-05T03:09:08Z https://headlines.subcloak.com/h/h-2026-0025/docker-sandboxes-copy-command-let-ai-agents-reach-files-outside-their-sandbox/2026-11-04T02:46:31Z https://headlines.subcloak.com/h/h-2026-0022/github-flags-npm-package-dowload-ebok-armageddon-by-max-hastings-kv3s4-as-malware/2026-11-01T06:26:56Z https://headlines.subcloak.com/h/h-2026-0021/github-flags-npm-package-789bet-as-malware/2026-11-01T05:35:33Z https://headlines.subcloak.com/h/h-2026-0018/tampered-claude-code-extension-on-cursors-marketplace-planted-an-ssh-backdoor/2026-10-31T16:04:53Z https://headlines.subcloak.com/h/h-2026-0017/cisa-lists-unauthenticated-gitlab-ci-cd-code-execution-flaw-as-known-exploited/2026-10-30T04:18:19Z https://headlines.subcloak.com/h/h-2026-0015/hidden-chrome-extensions-hijacked-searches-for-13-million-users/2026-10-30T04:11:53Z https://headlines.subcloak.com/h/h-2026-0012/gheist-campaign-uses-stolen-github-tokens-to-dump-private-repositories-secrets/2026-10-28T06:20:22Z https://headlines.subcloak.com/h/h-2026-0011/ovhcloud-cli-releases-swapped-for-a-credential-stealer-for-94-minutes/2026-10-25T06:17:34Z https://headlines.subcloak.com/h/h-2026-0009/opencode-flaw-let-a-rogue-mcp-server-run-commands-on-windows-during-sign/2026-10-24T06:30:37Z https://headlines.subcloak.com/h/h-2026-0008/docker-hub-flaw-let-converted-accounts-hand-personal-access-tokens-to-another-user/2026-10-24T07:05:59Z https://headlines.subcloak.com/h/h-2026-0007/opencode-says-its-hosted-console-was-breached/2026-10-24T07:05:55Z https://headlines.subcloak.com/h/h-2026-0006/fake-solidity-and-hardhat-extensions-on-open-vsx-install-backdoor-on-macs/2026-10-23T16:31:07Z https://headlines.subcloak.com/h/h-2026-0005/ghostaction-wave-plants-secret-stealing-fake-security-workflows-in-github/2026-10-24T07:06:01Z https://headlines.subcloak.com/h/h-2026-0004/tensorlake-npm-package-version-0-5-144-hijacked-to-ship-credential-stealing-worm/2026-10-23T16:31:07Z https://headlines.subcloak.com/h/h-2026-0003/php2shell-two-critical-php-engine-flaws-patched-after-disclosure-leaked-early/2026-11-05T03:09:06Z https://headlines.subcloak.com/h/h-2026-0002/eight-emudhra-intermediate-ca-keys-exposed/2026-10-24T06:35:32Z https://headlines.subcloak.com/h/h-2026-0001/litellm-1-107-0-hijacked-on-pypi-and-docker/2026-10-25T03:19:01Z