SAP npm Packages Compromised in Supply Chain Attack Using Obfuscated Bun Runtime Payload

An extensible developer-friendly application security platform that scans source code to surface true and actionable security issues with AI-assisted SAST, SCA, and Secrets Detection solutions.

With Cursor hooks, AppSec teams can guarantee that all code generated by AI is scanned with Semgrep - without introducing any friction to developers. Even cooler, hooks let Semgrep give agents critical security context before they generate code, making their outputs safer to begin with.