Tooling

2 published analyses.

Tooling Jul 14, 2026

Google and Microsoft Remove ModHeader Extension Over Hidden Collector

Google and Microsoft removed the ModHeader browser extension from their stores due to a dormant hidden browsing-history collector found in the official version, with no evidence of active data transmission.

#Browser Security #Supply Chain Risk #Threat Hunting

Read analysis

Tooling Jul 10, 2026

npm 12 Disables Install Scripts by Default to Enhance Security

GitHub released npm version 12 with install scripts disabled by default and deprecated granular access tokens used to bypass 2FA. These changes reduce the risk of supply chain attacks for developers and security teams.

#npm #Cybersecurity #SupplyChainSecurity

Read analysis