Vulnerable Gradle plugin-publish plugin reveals sensitive information

What to do when one of your WordPress plugins gets compromised

Supply Chain Attack Compromises Official GravityForms Plugin Repository

A supply chain attack compromised the official GravityForms plugin repository, injecting backdoors into legitimate plugin downloads. The bre

Composer vulnerability leaks GitHub Actions GITHUB_TOKEN in logs due to format mismatch

A security vulnerability has been identified where Composer leaks the full contents of GitHub OAuth tokens (specifically GITHUB_TOKEN) to st

Composer and Packagist Introduce New Supply Chain Security Measures After PHP Ecosystem Attacks

Composer and Packagist.org are implementing new security measures to combat rising software supply chain attacks targeting the PHP open-sour

Composer and Packagist Introduce New Supply Chain Security Measures After PHP Ecosystem Attacks

Composer and Packagist.org are implementing new security measures to combat rising software supply chain attacks targeting the PHP open-sour

Blog Post Temporarily Removed Due to Request, Author Points to Data Security Article

A blog post has been temporarily taken down due to an unspecified request, with the author hinting readers to guess the reason. The author p

Attackers Actively Exploiting Critical Vulnerability in Burst Statistics Plugin