Vulnerabilities
Snyk Research Shows AI Agents Can Fix Vulnerable Dependencies With High Accuracy
New benchmark tests prove AI agents can upgrade vulnerable packages without breaking builds, but they require security data to succeed.
Dependency Management
Everything Threat Times has reported about Dependency Management: 2 stories, newest first. Part of our Malware & Ransomware coverage.
Malware & Ransomware
Mistakes That Let Malicious npm Packages Compromise Your Build
Dependency confusion and typosquatting exploit default trust in public registries, allowing attackers to inject code into your build pipeline without direct access to your source repository.