sbomlyze v0.5.3

sbomlyze git diff for your SBOM. Compare two Software Bills of Materials and see what changed between builds, versions, and releases. sbomlyze compares component hashes, not only version strings. When an attacker swaps a package without bumping its version, sbomlyze flags it. Generators and...

3 Paths to Upgrade Windows 11 before 24H2 End of Servicing (EOL)

Key Takeaways Windows 11 24H2 reaches the end of servicing on October 13, 2026, making timely enterprise upgrades critical. Enterprises often face version drift, with multiple Windows 11 builds across endpoints requiring different upgrade paths. Upgrade approaches vary based on system state and m...

Malicious code in ilang-36 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 95f3d5214d48d3d68c54fc8ec2433a2984ebc708a0735ae75c0e4721ab051491 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in pyxis-cors-lint-staged-auriga (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2ff6de8a612c21ba192af4d769dd5031ed2e5826c6cc048594abc611bfac9b59 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

Malicious code in siska-klipo7-sluey (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector c8c5791e6e237eca7bd454d0c968d64b78e59ab52245979a58744ecb09af4c85 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...