Strapi plugins exploit Redis and PostgreSQL via postinstall scripts, enabling persistent access and data theft.
Supply chain attacks feel like they're becoming more and more common.
The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...