Research reports
1,224 reports from 387 publishers45 added in the past week
1 report, newest added first
Added Thu 6 Aug
TeamPCP Wave Four: GitHub Breach via Poisoned VS Code Extension, durabletask PyPI Worm, and ~4,000 Internal Repositories Exfiltrated
On May 19–20, 2026, two events landed within hours of each other. Wiz and Endor Labs documented three malicious versions of durabletask (1.4.1, 1.4.2, and 1.4.3) pushed to PyPI within a 35-minute window on May 19, the official Microsoft Azure Python SDK for…
Supply chain
Titles, excerpts and images come from each report or its publisher’s page, and every entry links to the publisher.