Security Research & Advisories

Security intelligence operators can act on quickly.

Fast incident posts from the SecOpsAI side of the console: affected packages, IOCs, detection logic, mitigations, timelines, and source-backed updates.

Subscribe JSON Feed

Featured Research

Mini Shai-Hulud crosses npm and PyPI: advisory protection for removed artifacts

Mini Shai-Hulud affected npm and PyPI packages, including removed artifacts that now receive source-backed SecOpsAI advisory detections.

Critical SecOpsAI Threat Research 4 min read

How we research

Source-backed. Detection-aware. Mitigation-first.

How we take a package from first signal to evidence, verdict, review and publication.

Read our research method →

Latest research

All posts
Info SecOpsAI Daily Intelligence Brief — 2026-11-03 2026-11-04 Info SecOpsAI Daily Intelligence Brief — 2026-10-31 2026-10-31 Info Measuring a malicious-package funnel: from 13% to 39% recall at under 0.5% false positives 2026-10-10 Info Anatomy of a false positive: clearing a critical npm alert in twenty minutes 2026-10-09
Intelligence Categories
ORIGINAL RESEARCH 2 posts

2 posts with SecOpsAI context, detections, or operator guidance.

THREAT INTELLIGENCE 2 posts

2 posts with SecOpsAI context, detections, or operator guidance.

SUPPLY CHAIN 3 posts

3 posts with SecOpsAI context, detections, or operator guidance.

DETECTION ENGINEERING 3 posts

3 posts with SecOpsAI context, detections, or operator guidance.

MITIGATION 1 post

1 post with SecOpsAI context, detections, or operator guidance.