Clankerusecase
MITRE ATT&CK detection coverage
 ← Back to main site
Home/ MITRE Matrix/ Defense Evasion/ T1027

T1027Obfuscated Files or Information

T1027 — Obfuscated Files or Information is a MITRE ATT&CK technique in the Defense Evasion tactic. Clankerusecase tracks 41 detection use cases covering it and 410 threat-intel articles citing it.

Defense Evasion
View on the matrix → Filter Detection Library MITRE official spec ↗
41Use cases
410Articles
18Sub-techniques
1Tactic

Sub-techniques (18)

T1027.001 · Binary PaddingT1027.010 · Command ObfuscationT1027.004 · Compile After DeliveryT1027.015 · CompressionT1027.007 · Dynamic API ResolutionT1027.009 · Embedded PayloadsT1027.013 · Encrypted/Encoded FileT1027.011 · Fileless StorageT1027.006 · HTML SmugglingT1027.005 · Indicator Removal from ToolsT1027.018 · Invisible UnicodeT1027.016 · Junk Code InsertionT1027.012 · LNK Icon SmugglingT1027.014 · Polymorphic CodeT1027.002 · Software PackingT1027.003 · SteganographyT1027.008 · Stripped PayloadsT1027.017 · SVG Smuggling

Use cases covering this technique (41)

File hash IOCs — endpoint file/process match Internal install · alerting DSΣP PowerShell encoded / obfuscated command Internal exploit · alerting DSΣP [WEEKLY] npm/yarn/pnpm Install-Hook Spawn → Credential-Store Read or Worm-Payload Drop in node_modules Internal install · alerting DSΣPDD [WEEKLY] Package-install lifecycle script harvests local credentials and beacons to a non-baselined domain Internal install · alerting DSPDD [WEEKLY] Package Manager Install Hook Spawns Scripting Interpreter Then Touches Credential Files or Egresses Off-Registry Internal install · alerting DSPDD Curl Execution with Percent Encoded URL ESCU actions · hunting P Linux Decode Base64 to Shell ESCU actions · alerting P Linux Obfuscated Files or Information Base64 Decode ESCU actions · hunting P Malicious PowerShell Process - Encoded Command ESCU actions · hunting P Powershell Fileless Script Contains Base64 Encoded Content ESCU actions · alerting P Wermgr Process Create Executable File ESCU actions · alerting P Windows Snake Malware File Modification Crmlog ESCU actions · alerting P Windows TinyCC Shellcode Execution ESCU actions · alerting P Cisco Secure Firewall - Lumma Stealer Activity ESCU actions · alerting P Cisco Secure Firewall - Repeated Malware Downloads ESCU actions · hunting P Cisco Secure Firewall - Snort Rule Triggered Across Multiple Hosts ESCU actions · hunting P [LLM] setup.mjs spawning Bun runtime to execute obfuscated payload from node_modules/bun-dl Bespoke install · alerting DSΣPDDCS [LLM] Unicode homoglyph dunder payload to Flowise /api/v1/prediction (validator bypass) Bespoke delivery · hunting SP [LLM] Shai-Hulud payload files setup.mjs / Math_Symbol.js written into node_modules Bespoke install · alerting DSΣPDDCS [LLM] Known-malicious Joyfill package bundle hash observed on disk Bespoke install · hunting DSΣPDD Article-specific behavioural hunt — OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage cam Bespoke exploit · hunting DSP [LLM] OctLurk/LurkProxy loader service registration (ServiceMain=RegisterService loading oleasapi.dll/msbasesysdc.dll) Bespoke install · alerting DSΣPDDCS [LLM] Malicious @injectivelabs SDK build artifact by SHA-256 on disk Bespoke install · hunting DSΣPDDCS [LLM] Bun runtime executing a temp payload spawned by node (Miasma Node.js-monitoring evasion) Bespoke exploit · hunting DSΣPDDCS [LLM] macOS.Gaslight known-bad file hashes (Mach-O implant, BONZAI sibling, Python/bash stages) Bespoke install · hunting DSΣPCS [LLM] Hades import-hook payload artifacts dropped (_index.js, _hooks.py, _runtime.bin, .bun_ran, b.zip) Bespoke install · alerting DSΣPDDCS [LLM] node-ipc stealer __ntw=1 environment marker in process command line Bespoke install · alerting DSΣPDDCS [LLM] TeamPCP Mini Shai-Hulud stealer payload hash match (SHA256/SHA1) Bespoke install · alerting DSΣPDDCS [LLM] Mini Shai-Hulud router_init.js dropped at npm package root in node_modules Bespoke install · alerting DSΣPDDCS [LLM] Mini Shai-Hulud Wave 4 (TanStack/TeamPCP) worm payload file created in node_modules Bespoke install · hunting DSΣPDD [LLM] Known-malicious bw_setup.js / bw1.js SHA256 dropped under @bitwarden/cli Bespoke install · alerting DSΣPDDCS [LLM] lightning PyPI compromise artifacts: start.py / router_runtime.js write Bespoke install · hunting DSΣPDD [LLM] Mini Shai-Hulud payload file drop: setup.mjs/execution.js by hash & size in node_modules Bespoke install · hunting DSΣPDD Article-specific behavioural hunt — axios Compromised on npm - Malicious Versions Drop Remote Access Trojan Bespoke exploit · hunting DSP [LLM] Python spawning python -c with base64.b64decode exec (litellm .pth stage-1 launcher) Bespoke install · alerting DSΣP [LLM] ForceMemo: init.json persistence file or i.js loader dropped by Python in user home root Bespoke install · hunting DSΣPDD [LLM] XZ Utils (CVE-2024-3094) build-time backdoor extraction from disguised test corpus Bespoke install · alerting DSΣPDDCS Article-specific behavioural hunt — LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Ja Bespoke exploit · hunting DSP [LLM] cups-browsed writing new PPD or config under /etc/cups or /var/cache/cups Bespoke install · hunting DSΣPDDCS [LLM] gxm-reference encrypted-payload artifacts written to disk (obfusc/mac/win/lin .enc.js) Bespoke delivery · alerting DSΣPDDCS [LLM] File dropped with invisible Unicode in its name (Hangul Filler U+3164 masquerading) Bespoke weapon · alerting DSΣPDDCS

Articles citing this technique (410)

crit CISA Flags Actively Exploited Ray Flaw That Can Trigger Browser-Based RCE art-03
high Philips and GE investigating Clop ransomware data theft claims art-22
crit Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies art-25
crit How QR-code phishing can slip past corporate security measures art-27
crit Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware art-28
crit New AmnesiaStealer macOS malware hijacks browser sessions via remote control art-33
high ChainDrop npm Worm: Bun-loaded CI/CD credential harvester with Ethereum dead-drop C2 art-34
crit Team PCP Stole 78,330 Secrets From 2,186 Organizations. CloudSEK Just Published the List. art-35
crit New Evooo1Bot Linux botnet turns routers into traffic relay nodes art-36
high Top enterprise SCA tools in 2026 art-39
high Hackers Spend Nearly $7 Million on Expired Domains to Redirect Traffic to Scams and Malware art-40
high Mustang Panda Adds Signed Windows Rootkit to CoolClient Backdoor for Stealth art-43
crit APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit art-48
crit China-Linked Jewelbug Uses XG-Web for Government Espionage and Crypto Fraud art-49
crit ThreatsDay: GhostJacking AI Attacks, EtherHiding ClickFix, Cursor CLI Flaw + 17 More Stories art-51
high Curiouser and Curiouser art-52
crit New PATCHCORD Backdoor Targets Afghan Telecom and Indian Critical Infrastructure art-53
crit AmnesiaStealer Hijacks Chromium Sessions to Give Attackers Live Browser Control on macOS art-55
crit WindRelay Android Malware Turns Victims' Phones Into NFC Relays for Payment Fraud art-58
crit Dissecting the JWR phishing framework art-60
high Armored Likho expands its cyber-espionage toolkit art-62
crit Lazarus Exploits Windows Zero-Day to Gain SYSTEM Access and Deploy Backdoor art-64
med Control Which Package Registries Your CI Jobs and Developer Machines Use art-65
crit Sandworm-Linked UAC-0145 Uses Fake Job Interviews to Push VPN That Can Run Commands art-81
high DeadLock Ransomware Uses Polygon Smart Contracts to Make Extortion Infra Harder to Disrupt art-82
crit Mozilla Revokes Firefox and Thunderbird Linux Signing Key After Key Lands in Private Repo art-86
crit Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver PhantomCore and PhantomGraph to video conference part art-87
high Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection art-91
crit Kimwolf v7: An Evolution of the Kimwolf Botnet art-92
crit The Permanent Threat: Analyzing Aeternum’s Blockchain-Based C2 Operations and Communications art-96
crit DeadLock ransomware: Breaking down a Rust-based encryptor with decentralized recovery infrastructure art-98
crit [GHSA / CRITICAL] CVE-2026-71851: crypto-js: Insufficient Entropy in Cryptographic Secret Generation via Vulnerable CryptoJS Dependency Chai art-103
crit ChainDrop: Inside a Self-Propagating npm Worm art-108
high Why metaphor may dictate your security strategy art-110
high Token Jacking: Cybercriminals Could Be Stealing Your AI Resources art-112
crit From open lures to cloaked gates: How a macOS ClickFix campaign learned to hide art-116
crit ChainDrop supply chain compromise: Anatomy of a self-propagating worm art-120
crit [GHSA / CRITICAL] CVE-2026-70477: Flowise: CSV Agent Prompt Injection Remote Code Execution Vulnerability art-122
crit [GHSA / CRITICAL] CVE-2026-70470: Flowise: Pyodide validator Unicode homoglyph bypass leads to RCE art-126
high Almost Half of Malware Samples Communicate Direct to IP art-132
high Keyv and friends compromised in active Shai-Hulud supply chain attack art-134
high A First Look at Evo Agentic AppSec: Agentic Remediation and Malicious Code Defense art-138
crit Inside the keyv npm Compromise: preinstall Malware, Trusted Provenance, and IDE Hooks art-139
crit CaptiveCrunch: Midnight Blizzard targets travelers worldwide for malware delivery and credential theft art-151
crit Anthropic's Fever Dream: Claude's package that stole real keys art-156
crit The Xcode Assassin Returns: A Deep Dive Into the Latest XCSSET Version art-160
crit Compromised npm Packages: @joyfill/components and @joyfill/layouts Ship an Obfuscated Remote Access Trojan art-163
crit You were onto something with “It’s the Climb,” Miley art-165
crit OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia art-169
crit Chinese-Speaking Threat Actor Harnesses AI Models for Autonomous Cyberattacks art-170
crit 2026 Mid-Year Update: On Pace for Our Biggest Year Yet art-182
crit Compromised PyPI Package: mrmustard 0.7.4 Steals SSH, Cloud, and Kubernetes Credentials art-193
crit [GHSA / CRITICAL] CVE-2026-73567: sm-crypto: Predictable SM2 key generation in Node.js: default RNG uses Math.random + wall clock art-196
crit Don’t swing at everything art-213
crit Russian Global Webmail Espionage art-217
high Find Unused, Stale, and OIDC-Replaceable GitHub Actions Secrets Across Your GitHub Organization art-221
high Finding eight high-severity vulnerabilities in NodeBB in six hours art-222
high Sol Searching | Can Frontier Models Tackle Autonomous Long-Horizon Malware Analysis? art-223
crit SleeperGem: RubyGems supply chain attack targets dormant maintainer accounts art-246
crit Unauthenticated RCE in WordPress core (wp2shell), via SQL injection art-247
crit Three Steps to the Terminal: A Siemens ROX II Zero-Day Trilogy art-249
crit Begun, the Patch Wars have art-253
crit UAT-11795 deploys novel Starland RAT and bespoke WLDR C2 implant in financially motivated campaign art-256
high Runtime Security for Third-Party GitHub Actions Runners: Bitrise, Blacksmith, Depot, Namespace, and Warp art-257
crit Coordinated AsyncAPI Supply Chain Attack: Miasma RAT Delivered via Compromised CI/CD Pipelines in Two Repositories art-259
crit The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15) art-263
crit TuxBot v3: Inside an IoT Botnet Framework With LLM-Assisted Development art-267
high AsyncAPI npm packages backdoored via GitHub Actions art-276
med Forgotten UEFI shims undermining Secure Boot art-277
high How Aikido Intel detects malware and vulnerabilities first art-284
crit What is a dependency firewall? art-287
crit jscrambler npm package publishes malicious preinstall binary art-290
high Injective npm Supply Chain Attack: 18 Packages Backdoored to Steal Crypto Wallet Keys art-291
crit Compromised @injectivelabs/sdk-ts exfiltrates wallet keys through fake telemetry art-308
crit One Target, Two Flags | Rival Espionage Actors Converge On Pakistani Law Enforcement art-309
crit ESET Threat Report H1 2026 art-312
high Cyber readiness for SMBs: Getting the basics right art-322
high StepSecurity Maintained Actions Are Now Free for Public Repos art-323
crit Secure Registry now tells you which machine pulled a compromised package art-326
high Multiple @immobiliarelabs Backstage Plugins Compromised on npm art-327
high Maven Support Comes to GitHub Checks and OSS Package Search art-328
high Mass npm Supply Chain Attack: 20 Leo Platform Packages Compromised art-329
high simonecorsi/mawesome GitHub Action has been compromised art-330
high codfish/semantic-release-action GitHub Action has been compromised art-331
high npm now freezes high-impact accounts after risky account changes art-340
high Top Koi alternatives in 2026 art-341
high Gamaredon in 2025: Leveraging tunnels, workers, dead drops, and new alliances art-344
high Everybody's shipping code they can't read art-345
crit CISA KEV: CVE-2026-12569 — PTC Windchill and FlexPLM Improper Input Validation Vulnerability art-347
high Compromised GitHub action codfish/semantic-release-action steals CI/CD secrets art-349
crit ESET takes part in Operation Endgame to disrupt Amadey and Stealc art-351
crit macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox art-352
high Mastra npm Supply Chain Attack: 140+ Packages Backdoored via easy-day-js Typosquat art-362
high Miasma and Hades Are Spreading Now: Detect Them on Developer Machines with Suspicious Files art-365
high The full Snyk AI Security Platform, free for open source maintainers art-367
high Over 140 popular Mastra npm Packages Hit by Supply Chain Attack art-370
crit A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope art-373
med FishMonger’s arsenal upgraded: SprySOCKS for Windows art-375
high 5 Socket security alternatives and why they are better art-383
crit CISA KEV: CVE-2026-35273 — Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability art-384
high npm v12 delivers one of the biggest security improvements in years art-385
crit OceanLotus: From external espionage to domestic targeting art-388
high Code is being written everywhere, and the device is the only constant art-390
high Pythagora-io/gpt-pilot Compromised on GitHub - Shai-Hulud Credential Stealer Blocked by Python Linter art-396
high Miasma Worm Hits Microsoft Again: Azure Functions Action and 72 Other Repositories Disabled After Supply Chain Attack Targeting AI Coding Ag art-397
crit Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build System art-398
crit CISA KEV: CVE-2026-50751 — Check Point Security Gateway Improper Authentication Vulnerability art-404
crit Miasma npm Supply Chain Attack: Self-Spreading Worm via Phantom Gyp art-407
high Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp art-408
high Why EDR and proxy won’t save you from supply chain malware art-415
high Multiple redhat-cloud-services npm Packages compromised art-416
high Laravel-Lang Supply Chain Attack: Every Tag Across Multiple Composer Packages Rewritten to Steal CI Secrets art-417
high Nx Console VS Code Extension Compromised art-419
high Protestware by open source maintainer to hinder agentic coding: The jqwik 1.10.0 Prompt Injection art-421
crit Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm art-425
high Miasma supply chain attack: malicious code found in @redhat-cloud-services npm packages art-426
high What MDM can't protect on developer machines (and what to do about it) art-432
crit CISA KEV: CVE-2026-48027 — Nx Console Embedded Malicious Code Vulnerability art-439
crit CISA KEV: CVE-2026-45321 — TanStack Unspecified Vulnerability art-440
crit CISA KEV: CVE-2026-8398 — Daemon Tools Lite Embedded Malicious Code Vulnerability art-441
high Why developer machines are now the number one target for supply chain attacks art-442
crit BTMOB: A stealthy RAT burrowing deep into Android devices art-443
crit Laravel Lang Supply Chain Advisory art-445
high Megalodon: Mass GitHub Actions Secret Exfiltration Across 5,500+ Public Repositories art-447
crit 5 Supply Chain Attacks in 48 Hours: Why Securing One Layer Is Not Enough art-452
crit The Wild West of VS Code extensions and how a poisoned extension breached GitHub art-457
high GitHub breached via a malicious VS Code extension: why developer devices are the real target art-458
crit Webworm: New burrowing techniques art-459
crit CISA KEV: CVE-2010-0249 — Microsoft Internet Explorer Use-After-Free Vulnerability art-464
high The AntV Supply Chain Campaign Expands: Microsoft's `durabletask` PyPI Package Compromised art-468
high Microsoft's durabletask package on PyPi Compromised. Mini Shai Hulud attacks again... again! art-469
crit Mini Shai-Hulud strikes again: npm worm compromises hundreds of @antv packages art-471
crit Active Supply Chain Attack: Malicious node-ipc Versions Published to npm art-473
crit Mini Shai-Hulud Hits AntV: 300+ Malicious npm Packages Published via Compromised Maintainer Account art-474
crit Malicious node-ipc versions published to npm in suspected maintainer account compromise art-477
crit FrostyNeighbor: Fresh mischief and digital shenanigans art-481
crit TeamPCP's Mini Shai-Hulud Is Back: A Self-Spreading Supply Chain Attack Compromises TanStack npm Packages art-483
crit Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstack art-486
crit TanStack Npm Packages Compromised Inside The Mini Shai Hulud Supply Chain Attack art-488
crit PCPJack | Cloud Worm Evicts TeamPCP and Steals Credentials at Scale art-492
crit Fake call logs, real payments: How CallPhantom tricks Android users art-493
crit A rigged game: ScarCruft compromises gaming platform in a supply-chain attack art-500
crit Shai-Hulud Worm Pivots to Multi-Cloud: intercom-client@7.0.4 Hijacked — 361,000 Weekly Downloads, AWS, GCP, and Azure Credentials Now in Sco art-501
crit Bitwarden CLI Hijacked on npm: Bun-Staged Credential Stealer Targets Developers, GitHub Actions, and AI Tools art-503
crit CanisterSprawl: pgserve Compromised on npm: Malicious Versions Harvest Credentials and Exfiltrate to a Decentralized ICP Canister art-504
high Popular PyTorch Lightning Package Compromised by Mini Shai-Hulud art-507
crit lightning PyPI Compromise: A Bun-Based Credential Stealer in Python art-511
crit Mini Shai-Hulud Targets SAP npm Packages With a Bun-Based Secret Stealer art-513
high Someone published four versions of a fake "tanstack" package in 27 minutes to steal your .env files art-514
high "A Mini Shai-Hulud Has Appeared": Bun-Based Stealer Hits SAP @cap-js and mbt npm Packages art-515
high Malicious Release of elementary-data PyPI Package Steals Cloud Credentials from Data Engineers art-520
high Is Shai-Hulud Back? Compromised Bitwarden CLI Contains a Self-Propagating npm Worm art-528
crit GopherWhisper: A burrow full of malware art-529
high GPT-Proxy Backdoor in npm and PyPI turns Servers into Chinese LLM Relays art-534
crit What the ransom note won’t say art-537
high Securing Vibe Coding and AI Coding Agents: An End-to-End Approach with StepSecurity art-562
crit axios Compromised on npm - Malicious Versions Drop Remote Access Trojan art-568
high hackerbot-claw: An AI-Powered Bot Actively Exploiting GitHub Actions - Microsoft, DataDog, and CNCF Projects Hit So Far art-570
high GlassWorm goes native: New Zig dropper infects every IDE on your machine art-572
high Malicious IoliteLabs VSCode Extensions Target Solidity Developers on Windows, macOS, and Linux with Backdoor art-577
crit TeamPCP Plants WAV Steganography Credential Stealer in telnyx PyPI Package art-578
high Axios npm Package Compromised: Supply Chain Attack Delivers Cross-Platform RAT art-585
crit litellm: Credential Stealer Hidden in PyPI Wheel art-587
high CanisterWorm: How a Self-Propagating npm Worm Is Spreading Backdoors Across the Ecosystem art-592
crit bittensor-wallet 4.0.2 Compromised on PyPI - Backdoor Exfiltrates Private Keys art-594
high Malicious npm Releases Found in Popular React Native Packages - 130K+ Monthly Downloads Compromised art-595
crit Malicious Polymarket Bot Hides in Hijacked dev-protocol GitHub Org and Steals Wallet Keys art-596
crit ForceMemo: Hundreds of GitHub Python Repos Compromised via Account Takeover and Force-Push art-597
high xygeni-action Compromised: C2 Reverse Shell Backdoor Injected via Tag Poisoning art-598
crit EDR killers explained: Beyond the drivers art-613
crit Securing the Agent Skills Registry: How Snyk and Tessl Are Setting the Standard art-620
high DRILLAPP: new backdoor targeting Ukrainian entities with possible links to Laundry Bear art-623
high kubernetes-el Compromised: How a Pwn Request Exploited a Popular Emacs Package art-627
crit Sednit reloaded: Back in the trenches art-629
crit CISA KEV: CVE-2025-26399 — SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability art-631
crit PlugX Meeting Invitation via MSBuild and GDATA art-648
high 20+ Popular NPM Packages Compromised (Chalk, Debug, Strip-ANSI, Color-Convert, Wrap-ANSI...) art-673
high 2024 in Review: The Evolution of CI/CD Security & What's Next art-674
high Harden-Runner detection: tj-actions/changed-files action is compromised art-689
high Why Your “Skill Scanner” Is Just False Security (and Maybe Malware) art-694
crit Snyk Finds Prompt Injection in 36%, 1467 Malicious Payloads in a ToxicSkills Study of Agent Skills Supply Chain Compromise art-705
crit DynoWiper update: Technical analysis and attribution art-717
high ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025 art-728
high The Holiday Whisper: Shai-Hulud 3.0 art-751
crit LongNosedGoblin tries to sniff out governmental affairs in Southeast Asia and Japan art-758
high Security Advisory: Critical RCE Vulnerabilities in React Server Components (CVE-2025-55182) art-782
high SHA1-Hulud, npm supply chain incident art-796
crit PlushDaemon compromises network devices for adversary-in-the-middle attacks art-803
crit CISA KEV: CVE-2025-21042 — Samsung Mobile Devices Out-of-Bounds Write Vulnerability art-817
crit CISA KEV: CVE-2025-24893 — XWiki Platform Eval Injection Vulnerability art-824
crit CISA KEV: CVE-2025-61932 — Motex LANSCOPE Endpoint Manager Improper Verification of Source of a Communication Channel Vulnerability art-831
crit Phishing Campaign Leveraging the NPM Ecosystem art-846
crit CISA KEV: CVE-2025-61882 — Oracle E-Business Suite Unspecified Vulnerability art-855
crit CISA KEV: CVE-2025-21043 — Samsung Mobile Devices Out-of-Bounds Write Vulnerability art-859
crit CISA KEV: CVE-2025-10035 — Fortra GoAnywhere MFT Deserialization of Untrusted Data Vulnerability art-864
crit CISA KEV: CVE-2025-20352 — Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution Vulnerability art-865
high Zero-day Extensive NPM Package Compromise - Shai Hulud Supply Chain Attack art-875
crit CISA KEV: CVE-2025-5086 — Dassault Systèmes DELMIA Apriso Deserialization of Untrusted Data Vulnerability art-876
crit CISA KEV: CVE-2025-53690 — Sitecore Multiple Products Deserialization of Untrusted Data Vulnerability art-882
crit CISA KEV: CVE-2013-3893 — Microsoft Internet Explorer Resource Management Errors Vulnerability art-902
crit Maintainers of ESLint Prettier Plugin Attacked via npm Supply Chain Malware art-917
crit CISA KEV: CVE-2025-49704 — Microsoft SharePoint Code Injection Vulnerability art-922
high Cursor IDE Malware Extension Compromise in $500k Crypto Heist art-924
crit CISA KEV: CVE-2025-53770 — Microsoft SharePoint Deserialization of Untrusted Data Vulnerability art-925
crit CISA KEV: CVE-2025-47812 — Wing FTP Server Improper Neutralization of Null Byte or NUL Character Vulnerability art-927
crit CISA KEV: CVE-2023-33538 — TP-Link Multiple Routers Command Injection Vulnerability art-948
crit CISA KEV: CVE-2025-33053 — Microsoft Windows External Control of File Name or Path Vulnerability art-954
crit CISA KEV: CVE-2024-42009 — RoundCube Webmail Cross-Site Scripting Vulnerability art-956
crit CISA KEV: CVE-2025-35939 — Craft CMS External Control of Assumed-Immutable Web Parameter Vulnerability art-969
crit CISA KEV: CVE-2024-27443 — Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability art-981
crit CISA KEV: CVE-2025-27920 — Srimax Output Messenger Directory Traversal Vulnerability art-982
crit CISA KEV: CVE-2024-11182 — MDaemon Email Server Cross-Site Scripting (XSS) Vulnerability art-983
crit CISA KEV: CVE-2025-4428 — Ivanti Endpoint Manager Mobile (EPMM) Code Injection Vulnerability art-984
crit CISA KEV: CVE-2025-4427 — Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability art-985
crit CISA KEV: CVE-2024-12987 — DrayTek Vigor Routers OS Command Injection Vulnerability art-987
crit CISA KEV: CVE-2025-32756 — Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability art-988
crit CISA KEV: CVE-2024-11120 — GeoVision Devices OS Command Injection Vulnerability art-997
crit CISA KEV: CVE-2024-6047 — GeoVision Devices OS Command Injection Vulnerability art-998
crit CISA KEV: CVE-2025-31324 — SAP NetWeaver Unrestricted File Upload Vulnerability art-1007
crit CISA KEV: CVE-2025-24054 — Microsoft Windows NTLM Hash Disclosure Spoofing Vulnerability art-1013
crit CISA KEV: CVE-2021-20035 — SonicWall SMA100 Appliances OS Command Injection Vulnerability art-1017
crit CISA KEV: CVE-2025-29824 — Microsoft Windows Common Log File System (CLFS) Driver Use-After-Free Vulnerability art-1021
crit CISA KEV: CVE-2025-30406 — Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability art-1022
crit CISA KEV: CVE-2025-31161 — CrushFTP Authentication Bypass Vulnerability art-1023
crit CISA KEV: CVE-2025-22457 — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability art-1024
crit CISA KEV: CVE-2025-2783 — Google Chromium Mojo Sandbox Escape Vulnerability art-1030
crit CISA KEV: CVE-2025-30154 — reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability art-1033
crit CISA KEV: CVE-2025-30066 — tj-actions/changed-files GitHub Action Embedded Malicious Code Vulnerability art-1041
crit CISA KEV: CVE-2025-24472 — Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability art-1042
crit Reconstructing the TJ Actions Changed Files GitHub Actions Compromise art-1043
crit CISA KEV: CVE-2025-21590 — Juniper Junos OS Improper Isolation or Compartmentalization Vulnerability art-1046
crit CISA KEV: CVE-2025-26633 — Microsoft Windows Management Console (MMC) Improper Neutralization Vulnerability art-1057
crit CISA KEV: CVE-2024-57968 — Advantive VeraCore Unrestricted File Upload Vulnerability art-1061
crit CISA KEV: CVE-2025-25181 — Advantive VeraCore SQL Injection Vulnerability art-1062
crit CISA KEV: CVE-2025-22224 — VMware ESXi and Workstation TOCTOU Race Condition Vulnerability art-1068
crit CISA KEV: CVE-2023-20118 — Cisco Small Business RV Series Routers Command Injection Vulnerability art-1074
crit CISA KEV: CVE-2024-41710 — Mitel SIP Phones Argument Injection Vulnerability art-1092
crit CISA KEV: CVE-2025-0994 — Trimble Cityworks Deserialization Vulnerability art-1097
crit CISA KEV: CVE-2025-0411 — 7-Zip Mark of the Web Bypass Vulnerability art-1103
crit CISA KEV: CVE-2024-50603 — Aviatrix Controllers OS Command Injection Vulnerability art-1118
crit CISA KEV: CVE-2025-0282 — Ivanti Connect Secure, Policy Secure, and ZTA Gateways Stack-Based Buffer Overflow Vulnerability art-1130
crit CISA KEV: CVE-2021-44207 — Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability art-1137
crit CISA KEV: CVE-2024-55956 — Cleo Multiple Products Unauthenticated File Upload Vulnerability art-1144
high Ultralytics AI Pwn Request Supply Chain Attack art-1149
crit CISA KEV: CVE-2024-11667 — Zyxel Multiple Firewalls Path Traversal Vulnerability art-1156
crit CISA KEV: CVE-2024-9474 — Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability art-1171
crit CISA KEV: CVE-2024-0012 — Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability art-1172
crit CISA KEV: CVE-2024-49039 — Microsoft Windows Task Scheduler Privilege Escalation Vulnerability art-1184
crit CISA KEV: CVE-2024-47575 — Fortinet FortiManager Missing Authentication Vulnerability art-1198
crit CISA KEV: CVE-2024-38094 — Microsoft SharePoint Deserialization Vulnerability art-1201
crit CISA KEV: CVE-2024-9680 — Mozilla Firefox Use-After-Free Vulnerability art-1209
crit CISA KEV: CVE-2024-9380 — Ivanti Cloud Services Appliance (CSA) OS Command Injection Vulnerability art-1214
crit CISA KEV: CVE-2023-25280 — D-Link DIR-820 Router OS Command Injection Vulnerability art-1229
high Zero-day RCE vulnerability found in CUPS - Common UNIX Printing System art-1230
crit CISA KEV: CVE-2024-8963 — Ivanti Cloud Services Appliance (CSA) Path Traversal Vulnerability art-1236
crit CISA KEV: CVE-2014-0497 — Adobe Flash Player Integer Underflow Vulnerablity art-1246
crit CISA KEV: CVE-2024-6670 — Progress WhatsUp Gold SQL Injection Vulnerability art-1248
crit CISA KEV: CVE-2024-8190 — Ivanti Cloud Services Appliance OS Command Injection Vulnerability art-1250
crit CISA KEV: CVE-2024-38217 — Microsoft Windows Mark of the Web (MOTW) Protection Mechanism Failure Vulnerability art-1251
crit CISA KEV: CVE-2024-7262 — Kingsoft WPS Office Path Traversal Vulnerability art-1261
crit CISA KEV: CVE-2024-39717 — Versa Director Dangerous File Type Upload Vulnerability art-1271
crit CISA KEV: CVE-2024-38213 — Microsoft Windows SmartScreen Security Feature Bypass Vulnerability art-1286
crit CISA KEV: CVE-2024-38178 — Microsoft Windows Scripting Engine Memory Corruption Vulnerability art-1287
crit CISA KEV: CVE-2018-0824 — Microsoft COM for Windows Deserialization of Untrusted Data Vulnerability art-1294
crit CISA KEV: CVE-2012-4792 — Microsoft Internet Explorer Use-After-Free Vulnerability art-1303
crit CISA KEV: CVE-2024-36401 — OSGeo GeoServer GeoTools Eval Injection Vulnerability art-1310
crit CISA KEV: CVE-2024-26169 — Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability art-1331
crit CISA KEV: CVE-2024-4577 — PHP-CGI OS Command Injection Vulnerability art-1335
crit CISA KEV: CVE-2017-3506 — Oracle WebLogic Server OS Command Injection Vulnerability art-1342
crit CISA KEV: CVE-2024-1086 — Linux Kernel Use-After-Free Vulnerability art-1344
crit CISA KEV: CVE-2024-4978 — Justice AV Solutions (JAVS) Viewer Installer Embedded Malicious Code Vulnerability art-1347
med Preventing broken access control in express Node.js applications art-1351
crit CISA KEV: CVE-2024-4947 — Google Chromium V8 Type Confusion Vulnerability art-1354
crit CISA KEV: CVE-2024-3400 — Palo Alto Networks PAN-OS Command Injection Vulnerability art-1385
crit CISA KEV: CVE-2024-3273 — D-Link Multiple NAS Devices Command Injection Vulnerability art-1387
crit The XZ backdoor CVE-2024-3094 art-1392
high GitHub “besieged” by malware repositories and repo confusion: Why you'll be ok art-1402
crit CISA KEV: CVE-2024-1709 — ConnectWise ScreenConnect Authentication Bypass Vulnerability art-1419
crit CISA KEV: CVE-2023-46805 — Ivanti Connect Secure and Policy Secure Authentication Bypass Vulnerability art-1454
crit CISA KEV: CVE-2023-29300 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability art-1460
crit CISA KEV: CVE-2023-38203 — Adobe ColdFusion Deserialization of Untrusted Data Vulnerability art-1461
crit CISA KEV: CVE-2023-7101 — Spreadsheet::ParseExcel Remote Code Execution Vulnerability art-1465
crit CISA KEV: CVE-2023-49897 — FXC AE1021, AE1021PE OS Command Injection Vulnerability art-1470
crit CISA KEV: CVE-2023-47565 — QNAP VioStor NVR OS Command Injection Vulnerability art-1471
crit CISA KEV: CVE-2023-41266 — Qlik Sense Path Traversal Vulnerability art-1482
crit CISA KEV: CVE-2023-41265 — Qlik Sense HTTP Tunneling Vulnerability art-1483
crit CISA KEV: CVE-2023-4911 — GNU C Library Buffer Overflow Vulnerability art-1510
crit CISA KEV: CVE-2023-36033 — Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability art-1518
crit CISA KEV: CVE-2023-47246 — SysAid Server Path Traversal Vulnerability art-1522
med Real-time threat protection with Snyk and SentinelOne art-1528
crit CISA KEV: CVE-2023-22518 — Atlassian Confluence Data Center and Server Improper Authorization Vulnerability art-1534
crit CISA KEV: CVE-2023-5631 — Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability art-1544
crit CISA KEV: CVE-2023-42793 — JetBrains TeamCity Authentication Bypass Vulnerability art-1575
high Modern VS Code extension development tutorial: Building a secure extension art-1579
crit CISA KEV: CVE-2023-41991 — Apple Multiple Products Improper Certificate Validation Vulnerability art-1585
crit CISA KEV: CVE-2023-33246 — Apache RocketMQ Command Execution Vulnerability art-1612
crit CISA KEV: CVE-2023-27532 — Veeam Backup & Replication Cloud Connect Missing Authentication for Critical Function Vulnerability art-1626
high What are AI hallucinations and why should developers care? art-1629
crit CISA KEV: CVE-2023-3519 — Citrix NetScaler ADC and NetScaler Gateway Code Injection Vulnerability art-1660
crit CISA KEV: CVE-2023-36884 — Microsoft Windows Search Remote Code Execution Vulnerability art-1664
crit CISA KEV: CVE-2022-29303 — SolarView Compact Command Injection Vulnerability art-1666
crit CISA KEV: CVE-2023-32049 — Microsoft Windows Defender SmartScreen Security Feature Bypass Vulnerability art-1671
med Building a security-conscious CI/CD pipeline art-1676
crit CISA KEV: CVE-2019-17621 — D-Link DIR-859 Router Command Execution Vulnerability art-1678
crit CISA KEV: CVE-2019-20500 — D-Link DWL-2600AP Access Point Command Injection Vulnerability art-1679
crit CISA KEV: CVE-2023-34362 — Progress MOVEit Transfer SQL Injection Vulnerability art-1724
crit CISA KEV: CVE-2023-2868 — Barracuda Networks ESG Appliance Improper Input Validation Vulnerability art-1730
crit Data loss prevention for developers art-1733
crit CISA KEV: CVE-2023-25717 — Multiple Ruckus Wireless Products CSRF and RCE Vulnerability art-1750
crit CISA KEV: CVE-2023-28252 — Microsoft Windows Common Log File System (CLFS) Driver Privilege Escalation Vulnerability art-1793
crit CISA KEV: CVE-2021-27876 — Veritas Backup Exec Agent File Access Vulnerability art-1798
crit CISA KEV: CVE-2021-27877 — Veritas Backup Exec Agent Improper Authentication Vulnerability art-1799
crit CISA KEV: CVE-2021-27878 — Veritas Backup Exec Agent Command Execution Vulnerability art-1800
crit CISA KEV: CVE-2023-24880 — Microsoft Windows SmartScreen Security Feature Bypass Vulnerability art-1835
crit CISA KEV: CVE-2022-41328 — Fortinet FortiOS Path Traversal Vulnerability art-1836
high API authentication vulnerability found in Snyk Kubernetes integration (CVE-2023-1065) art-1850
crit CISA KEV: CVE-2015-2291 — Intel Ethernet Diagnostics Driver for Windows Denial-of-Service Vulnerability art-1869
crit CISA KEV: CVE-2022-47966 — Zoho ManageEngine Multiple Products Remote Code Execution Vulnerability art-1884
high Supply chain security incident at CircleCI: Rotate your secrets art-1895
crit CISA KEV: CVE-2022-42475 — Fortinet FortiOS Heap-Based Buffer Overflow Vulnerability art-1912
crit CISA KEV: CVE-2022-44698 — Microsoft Defender SmartScreen Security Feature Bypass Vulnerability art-1913
high Fetch the Flag CTF 2022 writeup: Treasure Trove art-1947
crit CISA KEV: CVE-2022-41128 — Microsoft Windows Scripting Languages Remote Code Execution Vulnerability art-1956
crit CISA KEV: CVE-2018-19323 — GIGABYTE Multiple Products Privilege Escalation Vulnerability art-1979
crit CISA KEV: CVE-2018-19320 — GIGABYTE Multiple Products Unspecified Vulnerability art-1982
crit CISA KEV: CVE-2022-24706 — Apache CouchDB Insecure Default Initialization of Resource Vulnerability art-2068
crit CISA KEV: CVE-2022-22047 — Microsoft Windows Client Server Runtime Subsystem (CSRSS) Privilege Escalation Vulnerability art-2123
crit CISA KEV: CVE-2022-29499 — Mitel MiVoice Connect Data Validation Vulnerability art-2132
crit CISA KEV: CVE-2022-30190 — Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability art-2144
crit CISA KEV: CVE-2012-0754 — Adobe Flash Player Memory Corruption Vulnerability art-2171
crit CISA KEV: CVE-2011-2462 — Adobe Reader and Acrobat Universal 3D Memory Corruption Vulnerability art-2173
crit CISA KEV: CVE-2022-26134 — Atlassian Confluence Server and Data Center Remote Code Execution Vulnerability art-2188
crit CISA KEV: CVE-2016-0034 — Microsoft Silverlight Runtime Remote Code Execution Vulnerability art-2197
crit CISA KEV: CVE-2015-0016 — Microsoft Windows TS WebProxy Directory Traversal Vulnerability art-2199
crit CISA KEV: CVE-2013-2423 — Oracle JRE Unspecified Vulnerability art-2218
crit CISA KEV: CVE-2013-0074 — Microsoft Silverlight Double Dereference Vulnerability art-2221
crit Snyk finds 200+ malicious npm packages, including Cobalt Strike dependency confusion attacks art-2226
crit CISA KEV: CVE-2017-0005 — Microsoft Windows Graphics Device Interface (GDI) Privilege Escalation Vulnerability art-2233
crit CISA KEV: CVE-2019-13720 — Google Chrome WebAudio Use-After-Free Vulnerability art-2259
crit CISA KEV: CVE-2019-11707 — Mozilla Firefox and Thunderbird Type Confusion Vulnerability art-2260
crit Targeted npm dependency confusion attack caught red-handed art-2296
crit CISA KEV: CVE-2022-22960 — VMware Multiple Products Privilege Escalation Vulnerability art-2321
crit CISA KEV: CVE-2018-7602 — Drupal Core Remote Code Execution Vulnerability art-2333
crit CISA KEV: CVE-2018-20753 — Kaseya VSA Remote Code Execution Vulnerability art-2334
crit CISA KEV: CVE-2017-11317 — Telerik UI for ASP.NET AJAX Unrestricted File Upload Vulnerability art-2350
crit CISA KEV: CVE-2021-21551 — Dell dbutil Driver Insufficient Access Control Vulnerability art-2373
crit CISA KEV: CVE-2018-10562 — Dasan GPON Routers Command Injection Vulnerability art-2374
crit CISA KEV: CVE-2016-7201 — Microsoft Edge Memory Corruption Vulnerability art-2391
crit CISA KEV: CVE-2016-7200 — Microsoft Edge Memory Corruption Vulnerability art-2392
crit CISA KEV: CVE-2013-2465 — Oracle Java SE Unspecified Vulnerability art-2402
crit CISA KEV: CVE-2020-9054 — Zyxel Multiple NAS Devices OS Command Injection Vulnerability art-2416
crit CISA KEV: CVE-2019-1132 — Microsoft Win32k Privilege Escalation Vulnerability art-2490
crit CISA KEV: CVE-2019-11581 — Atlassian Jira Server and Data Center Server-Side Template Injection Vulnerability art-2512
crit CISA KEV: CVE-2021-41379 — Microsoft Windows Installer Privilege Escalation Vulnerability art-2527
crit CISA KEV: CVE-2011-0611 — Adobe Flash Player Remote Code Execution Vulnerability art-2607
high Visibly invisible malicious Node.js packages: When configuration niche meets invisible characters art-2620
crit CISA KEV: CVE-2022-0609 — Google Chromium Animation Use-After-Free Vulnerability art-2640
crit CISA KEV: CVE-2013-3906 — Microsoft Graphics Component Memory Corruption Vulnerability art-2647
crit CISA KEV: CVE-2017-10271 — Oracle Corporation WebLogic Server Remote Code Execution Vulnerability art-2658
crit CISA KEV: CVE-2017-0263 — Microsoft Win32k Privilege Escalation Vulnerability art-2659
crit CISA KEV: CVE-2015-2051 — D-Link DIR-645 Router Remote Code Execution Vulnerability art-2664
crit CISA KEV: CVE-2021-32648 — October CMS Improper Authentication art-2697
crit CISA KEV: CVE-2021-36260 — Hikvision Improper Input Validation art-2718
crit CISA KEV: CVE-2019-2725 — Oracle WebLogic Server, Injection art-2722
crit CISA KEV: CVE-2021-44515 — Zoho Desktop Central Authentication Bypass Vulnerability art-2760
crit CISA KEV: CVE-2021-44077 — Zoho ManageEngine ServiceDesk Plus Remote Code Execution Vulnerability art-2780
crit CISA KEV: CVE-2021-27104 — Accellion FTA OS Command Injection Vulnerability art-2803
crit CISA KEV: CVE-2021-27102 — Accellion FTA OS Command Injection Vulnerability art-2804
crit CISA KEV: CVE-2021-27101 — Accellion FTA SQL Injection Vulnerability art-2805
crit CISA KEV: CVE-2021-27103 — Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability art-2806
crit CISA KEV: CVE-2018-4878 — Adobe Flash Player Use-After-Free Vulnerability art-2811
crit CISA KEV: CVE-2021-30657 — Apple macOS Unspecified Vulnerability art-2839
crit CISA KEV: CVE-2021-30869 — Apple iOS, iPadOS, and macOS Type Confusion Vulnerability art-2843
crit CISA KEV: CVE-2021-26084 — Atlassian Confluence Server and Data Center Object-Graph Navigation Language (OGNL) Injection Vulnerability art-2850
crit CISA KEV: CVE-2020-25506 — D-Link DNS-320 Device Command Injection Vulnerability art-2872
crit CISA KEV: CVE-2020-8515 — Multiple DrayTek Vigor Routers Web Management Page Vulnerability art-2876
crit CISA KEV: CVE-2021-30116 — Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability art-2916
crit CISA KEV: CVE-2020-7961 — Liferay Portal Deserialization of Untrusted Data Vulnerability art-2917
crit CISA KEV: CVE-2021-31955 — Microsoft Windows Kernel Information Disclosure Vulnerability art-2925
crit CISA KEV: CVE-2021-31199 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability art-2932
crit CISA KEV: CVE-2021-31956 — Microsoft Windows NTFS Privilege Escalation Vulnerability art-2934
crit CISA KEV: CVE-2021-31201 — Microsoft Enhanced Cryptographic Provider Privilege Escalation Vulnerability art-2935
crit CISA KEV: CVE-2017-7269 — Microsoft Windows Server Buffer Overflow Vulnerability art-2943
crit CISA KEV: CVE-2021-34473 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2950
crit CISA KEV: CVE-2021-1732 — Microsoft Win32k Privilege Escalation Vulnerability art-2952
crit CISA KEV: CVE-2021-34527 — Microsoft Windows Print Spooler Remote Code Execution Vulnerability art-2953
crit CISA KEV: CVE-2021-26857 — Microsoft Exchange Server Remote Code Execution Vulnerability art-2992
crit CISA KEV: CVE-2020-11652 — SaltStack Salt Path Traversal Vulnerability art-3026
crit CISA KEV: CVE-2020-11651 — SaltStack Salt Authentication Bypass Vulnerability art-3027
crit CISA KEV: CVE-2020-10148 — SolarWinds Orion Authentication Bypass Vulnerability art-3036
crit CISA KEV: CVE-2018-14558 — Tenda AC7, AC9, and AC10 Routers Command Injection Vulnerability art-3050
crit CISA KEV: CVE-2019-16759 — vBulletin PHP Module Remote Code Execution Vulnerability art-3062
crit CISA KEV: CVE-2020-25213 — WordPress File Manager Plugin Remote Code Execution Vulnerability art-3071
crit CISA KEV: CVE-2020-10189 — Zoho ManageEngine Desktop Central File Upload Vulnerability art-3076
high 5 potential risks of open source software art-3156
high SuiteCRM: PHAR deserialization vulnerability to code execution art-3188
high Developer driven workflows: Dockerfile image scanning, prioritization, and remediation art-3213
high AWS vulnerability scanning using the Snyk integration art-3237
high Container image formats under the hood art-3280
high SourMint malicious SDK research write up art-3303
high SourMint: iOS remote code execution, Android findings, and community response art-3305
high SourMint malicious SDK research writeup art-3336
high What is a backdoor? Let’s build one with Node.js art-3421
high Everything you wanted to know about addressing security vulnerabilities in Linux-based containers art-3501
high A technical analysis of the Capital One cloud misconfiguration breach art-3518
high Malicious remote code execution backdoor discovered in the popular bootstrap-sass Ruby gem art-3568
high Malicious code found in npm package event-stream downloaded 8 million times in the past 2.5 months art-3608
high Using the Snyk API to find and fix vulnerabilities art-3650
high Yarn is Micro Secure art-3691
high Keeping your open source credentials closed art-3714