StepSecurity
Printed in Security Desk · stepsecurity.io
Publishes about 2 a week · last piece Oct 9, 2026
How often
about 2 a week, by the archive: 5 pieces since Sep 30, 2026.
12 weeks agothis week
Latest pieces
- GhostAction Returns: Malicious “Security Audit” Workflows Now Mine Credentials from Entire Git Histories
- StepSecurity Now Inventories AI Agent Skills in Your GitHub Repositories and on Developer Machines
- Tensorlake npm Package Compromised: A Worm With a Hostage Token That Wipes Your Machine If You Revoke It
- SubQuery Ecosystem Compromise: Hidden Credential Theft and Backdoors
- Sckit Supply Chain Worm Hits MemTensor npm & PyPi scopes
In these topics
Pick one in My Edition to read it with its neighbors.