The axios attack highlights a gap that scanners alone can't bridge. When a hijacked credential pushes a RAT directly to a registry, the code has no provenance and no history. We need to pair our detection with immutable, built-from-source open source software to stay ahead.

Full story: https://www.activestate.com/blog/axios-npm-breach/

Empower your teams to build with total confidence from the very first line of open source code. 🛡️

ActiveState Curated Catalogs deliver up to 99% reduction in CVEs by providing vetted components rebuilt in our SLSA Level 3 compliant infrastructure. Accelerate your development with a trusted foundation that eliminates manual triage and noisy scanners and gives you the freedom to innovate at the speed of AI. 🚀

https://www.activestate.com/resources/press-releases/activestate-launches-curated-catalogs-to-neutralize-security-risks-in-ai-generated-code/?utm_source=twitter/x&utm_medium=organic_social&utm_campaign=fy26_q1_curated_catalog

#AppSec #CyberSecurity #ZeroTrust #ActiveState

Exciting news! ActiveState welcomes industry veteran Abby Kearns as our new CEO.

With 25 plus years of experience at Cloud Foundry and Puppet, Abby is set to lead our next phase of growth in securing the global software supply chain.

Read more here: https://www.activestate.com/resources/press-releases/activestate-appoints-open-source-and-technology-leader-abby-kearns-to-ceo-to-drive-next-phase-of-growth/?utm_source=linkedin&utm_medium=organic_social

#OpenSource #InfoSec #TechNews

Supply chain attacks have surged 300% since 2024. The old scan and fix model is officially broken. 📉

The OSS industry is moving toward a secure by default model with Curated Catalogs.

✅ Eliminate 99% of CVEs
✅ Save 30 to 50% of developer time

Read more: https://www.activestate.com/blog/improving-security-sosture-with-curated-catalogs/?utm_source=linkedin&utm_medium=organic_social&utm_campaign=fy26_q1_curated_catalog

#DevSecOps #AppSec #CyberSecurity

The possibilities of tech are infinite when everyone has a seat at the terminal. Today, we’re proud to celebrate the brilliant women on our team and in the global dev community.

#IWD2026 #InternationalWomensDay #OpenSource #ActiveState

Are you ready for the EU CRA? 🛑

Don't wait for the deadline to scramble. We’ve put together a guide on the essential steps for compliance and expert advice for your teams.

Read more: https://www.activestate.com/blog/mastering-cra-compliance-requirements/

#CyberResiliencyAct #InfoSec #AppSec #ActiveState

We didn't just join the race; we set a new World Record. 🌎🏆

ActiveState has launched the world’s largest Secure Open Source library:
✅ 79M+ Secure Components
✅ 12+ Language Ecosystems
✅ 1st Place in Software Supply Chain Security

Tale of the Tape: https://www.activestate.com/resources/press-releases/activestate-unifies-79m-components-to-launch-worlds-largest-secure-open-source-catalog/?utm_source=twitter/x&utm_medium=organic_social&utm_campaign=fy26_q1_organic_social

#CyberSecurity #OSS