Dev Machine Guard

Reported Context (10)

StepSecurity now gives security teams an inventory of both. Dev Machine Guard shows the skills detected in supported locations on your developer machines, and a new Agent Skills page under GitHub shows the skills StepSecurity Adds Inventory of AI Agent Skills on Developer Machines and GitHub
StepSecurity Dev Machine Guard inventories packages on enrolled developer devices and exposes their versions and installation locations. Search for @subql/common version 5.8.3, including copies installed through other StepSecurity Reports Credential-Stealing Backdoor in @subql/common 5.8.3
trinnyyyy directories, and unexpected Bun executables created at the time of installation. Dev Machine Guard suspicious file rules can help detect these artifacts across managed developer endpoints. Exposed GitHub Actions Workflow Used to Publish Malicious npm Releases of @7nohe/openapi-react-query-codegen
Dev Machine Guard now inventories browser extensions installed on developer machines. A new Browser Extensions page in the StepSecurity dashboard shows every extension detected across your fleet, what the browser is Step Security Adds Browser Extension Inventory to Dev Machine Guard
Dev Machine Guard now inventories the credential sources in use across developer machines. A new Credentials page in the StepSecurity dashboard shows which credential sources are in use, how far each one spreads across Step Security Adds Developer Credential Inventory to Dev Machine Guard

Malware (7)

People (2)

Threat Actors (3)

MITRE ATT&CK (19)

Vendors (6)

Products (33)

Industries (14)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.