Widespread Supply Chain Compromise Impacting npm Ecosystem

CISA is releasing this Alert to provide guidance in response to a widespread software supply chain compromise involving the world’s largest JavaScript registry, npmjs.com. A self-replicating worm—publicly known as “Shai-Hulud”—has compromised over 500 packages.i After gaining initial access, the...

[SECURITY] Fedora 40 Update: maven-resolver-1.9.18-3.fc40

Apache Maven Artifact Resolver is a library for working with artifact repositories and dependency resolution. Maven Artifact Resolver deals with the specification of local repository, remote repository, developer workspaces, artifact transports and artifact resolution...

Apache Archiva Detection

The remote web server hosts Apache Archiva, an extensible repository management tool for working with personal or enterprise-wide build artifact repositories, such as those used with Maven, Continuum, and ANT. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid54969;...