🧰 Snyk

The items that name it 36

• PHP Patches Two Critical Unauthenticated RCEs (CVE-2026-109618, CVE-2026-109619): Update Now
  advisoryas classification.technologies2026-10-22
• AI Model Risk Depends on What the Model Can Reach
  articleas classification.technologies2026-10-21
• AI Is Calling In Every Risk You've Accepted: Seven Insights From The AI Security Panel: Unfiltered
  articleas classification.technologies2026-10-21
• VulnBump: Can AI Agents Fix Vulnerable Dependencies Without Breaking the Build?
  articleas classification.technologies2026-10-15
• Static SCA vs. Dynamic SCA: Which is Better (and Why It's Neither) | Blog | Endor Labs
  articleas tools2026-10-12It is written here as Snyk (static SCA vendor).

  static SCA vendor

• Frontier models found the vulnerabilities. Only the attacker found the chains.
  articleas classification.technologies2026-10-07
• Why AI Coding Agents Keep Writing Broken Access Control
  articleas classification.technologies2026-10-01
• Your Vulnerability Backlog Is No Longer Technical Debt, It’s an Attack Surface
  articleas tools2026-09-24

  Security/vulnerability management product; cited as source of product data showing roughly six new vulnerabilities introduced for every one remediated (as of June 2026)

• Is prevention essentially a solved problem?
  articleas classification.technologies2026-09-10
• PackageGuard
  repoas tools2026-08-31

  Referenced as an expensive commercial supply-chain/software composition analysis product that PackageGuard aims to provide a cheaper alternative to

• OWASP Agentic Skills Top 10 explained: the ten agent skill risks, and which to fix first
  articleas classification.technologies2026-08-25
• NPM Isn't Prepared For North Korean PolinRider Attack
  writeupas tools2026-08-25

  dependency security scanner referenced as relying on GHSA feed

• 0sec-labs/0
  repoas tools2026-08-19

  Integration via plugins/MCP for vulnerability scanning

• Remediation Agents, Demystified: Why Fixing Beats Finding
  articleas classification.technologies2026-08-19
• Benchmarking Secure-and-Functional Remediation and How Snyk Agent Fix Lifts Frontier-Model Fix Rates by over 14%
  articleas classification.technologies2026-08-18
• The Agent Baseline: 35 Controls, But Where Should You Start?
  articleas classification.technologies2026-08-12
• Show, Don't Tell: What Evo Continuous Offensive Security Found in a Real Enterprise SaaS
  articleas classification.technologies2026-08-10
• npm-scan
  repoas tools2026-08-05

  Dependency version scanning tool, described as missing behavioral attack patterns

• What Is AI Pentesting and How Does It Work?
  articleas classification.technologies2026-07-27
• MCP Configuration Poisoning: Owning Your Machine With Just A Text File
  writeupas classification.technologies2026-07-23
• Cybersecurity Startup Publishes Infostealers to NPM
  writeupas tools2026-07-09

  Reputation-based supply-chain security scanning tool whose package-age risk scoring was defeated via version backfilling

• Snyk VulnBench JS 1.0: Can LLMs Find the Same Bugs Twice?
  writeupas classification.technologies2026-06-29
• NVD in the AI Era: The Case for Multi-Source Vulnerability Intelligence
  articleas classification.technologies2026-06-25
• When a vendor's breach becomes yours: lessons from the Klue incident
  articleas affected products2026-06-23
• Teycir/SkillsGuard
  repoas tools2026-06-21

  Competing AI agent skill scanner mentioned as requiring signing up for a service (account required).

• A Forgotten Contributor Account Compromised the Entire Mastra npm Package Scope
  writeupas tools2026-06-16

  Security scanning platform used to detect the malicious easy-day-js package (flagged as SNYK-JS-EASYDAYJS-17353313) and to remediate scope-wide npm compromises; referenced remediation demo 'Shai-Hulud NPM Attack: Remediation with Snyk'

• When a Government Pulls an AI Model: What the Fable 5 and Mythos 5 Suspension Means for Security Teams
  articleas tools2026-06-14

  Application security platform; scans AI-generated code, provides risk-based vulnerability prioritization, asset discovery for AI blast radius, and the Snyk Vulnerability DB

• Node-gyp Supply Chain Compromise: A Self-Propagating npm Worm That Hides in binding.gyp
  writeupas classification.key entities2026-06-04
• Type Level Security: The future of secure AI code generation?
  articleas classification.technologies2026-06-04
• The sorry state of skill distribution
  writeupas tools2026-06-03

  One of three external scanners integrated into skills.sh; bypassed

• OWASP/DockSec
  repoas tools2026-05-14

  Comparison point: commercial cloud platform offering AI remediation, sends data to its service (contrasted with DockSec's local/open-source design).

• OWASP Free AppSec Tools
  articleas tools2026-05-06

  Commercial tool identifying vulnerable components, integrates with CI/CD pipelines; free for open source; supports Node.js, Ruby, Java, Python, Scala, Golang, .NET, PHP

• Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages
  articleas tools

  Security firm that published a report on the campaign

• 973 MCP Packages, 71% Single-Maintainer: A Practitioner
  articleas toolsIt is written here as Snyk (SAST).

  SAST

• OWASP Agentic Skills Top 10 (AST10)
  repoas tools

  Published ToxicSkills audit, SKILL.md threat model, leaky skills research, skill scanner limitations research; partnered with Tessl and Vercel for registry-level skill scanning.

• OWASP Agentic Skills Top 10
  paperas tools

  Security research/audits of the skill ecosystem (ToxicSkills, leaky skills, scanner limitations); registry-level scanning partnerships with Tessl and Vercel.