Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

At Mend.io, we understand better than some the weight that sits atop the shoulders of open source maintainers who support the ecosystem at large. These maintainers need to keep on top of supply chain security best practices, keep their dependencies up-to-date, taking on new contributions from users, all the while trying to squeeze that into their “off hours”.

Static Application Security Testing (SAST) has become a critical part of modern DevSecOps. With software supply chain attacks rising and compliance requirements tightening, organizations need reliable SAST solutions that integrate into development workflows, reduce false positives, and deliver actionable remediation. Choosing the right tool is not just about scanning for vulnerabilities, it is about empowering developers to code securely without slowing delivery.

Mend’s security research team has identified a previously undocumented fifth wave of the PhantomRaven campaign, an ongoing NPM supply chain attack that has been stealing developer credentials and secrets since August 2025. This new wave uses a fresh command-and-control server, 33 new malicious packages, and a more sophisticated three-stage payload chain.

A new Linux kernel LPE disclosed by Theori/Xint lets any unprivileged local user become root with a 732-byte Python script. Works first try, no race, no per-kernel offsets. CVSS 7.8 (High), effectively critical for shared-kernel and multi-tenant environments.