February 20, 2026 Newly discovered NPM worm is hijacking CI workflows and targeting AI-based packages Moshe Siman Tov Bustan
April 15, 2026 The Mother of All AI Supply Chains: Technical Deep Dive Moshe Siman Tov Bustan, Mustafa Naamnih, Nir Zadok