Bloom Security

Everything Threat Times has reported about Bloom Security: 2 stories, newest first. Part of our Vulnerabilities coverage.

Vulnerabilities

Bloom Security Finds 1,500 npm Packages Vulnerable to AI-Driven Supply Chain Attacks

Threat TimesOct 13, 2026

Research reveals how automated AI coding tools could install malicious code via compromised npm packages, exposing enterprises to significant supply-chain risks.

Vulnerabilities

GitHub Fixes npm Trusted Publishing Flaw Exposing 1,500 Packages to Takeover

Threat TimesOct 13, 2026

Researchers found that npm’s Trusted Publishing feature allowed attackers to publish malicious updates without stealing credentials by claiming abandoned repository names.