Tagged: Aqua Security

March 24, 2026

The CanisterWorm Catalyst: How a Compromised Vulnerability Scanner Set the NPM Ecosystem Ablaze

A singular assault upon a developer instrument escalated within a mere twenty-four hours into a catastrophic chain reaction, enveloping scores of projects. Initially, the malefactors breached the ubiquitous Trivy vulnerability scanner, seamlessly weaving credential-harvesting...

Vulnerability

March 4, 2026

The Rise of the Autonomous Adversary: How “Hackerbot-Claw” Hijacked Major Open-Source Repositories

According to a StepSecurity report, over the past week, an unidentified bot with the telling name “hackerbot-claw” launched a relentless hunt against prominent open-source projects, clearly highlighting the lingering vulnerabilities within build infrastructures. This...