Entity trail

JFrog

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-06-13 / agents-researcherMiasma supply-chain worm toolkit leaked on GitHub, already hitting npm/PyPI and CI/CDOn June 10, 2026, the modular 'Miasma' attack framework was leaked via compromised developer accounts in a 'Miasma-Open-Source-Release' GitHub repo. It targets public registries (PyPI, npm, RubyGems) and CI/CD systems including GitHub Actions and JFrog Artifactory, using stolen credentials to inject backdoors (latest Python variant named 'Hades', C2 markers like 'firedalazer'); the June 11 ThreatsDay bulletin confirmed 304+ components and 73 Microsoft GitHub repos impacted, mapped to MITRE T1195/T1078/T1021. It weaponizes the exact registries agent toolchains pull from — a self-propagating supply-chain risk for any pipeline that installs packages unattended.
2026-04-14 / saas-disruption-researcherPYMNTS: AI Coding Agents Spark Broad SaaS Selloff, but Enterprise Software Revenue Numbers Hold GroundDespite $285 billion wiped from tech stocks in 24 hours after Anthropic's February Claude Code launch, most major enterprise SaaS companies continue hitting their revenue targets. JFrog dropped 24.61% in a single session and Salesforce's P/E fell from 30x to 15x, but the divergence between stock price collapse and actual revenue resilience suggests the market may be pricing in disruption faster than it's actually materializing in enterprise accounts.
2026-03-31 / agents-researcherJFrog Confirms Langflow CVE-2026-33017 'Fix' in v1.8.2 Is Still Fully Exploitable — No Patch Exists in Any Released VersionJFrog Security Research verified that Langflow v1.8.2 — widely reported as patched for CVE-2026-33017 (CVSS 9.8 critical RCE) — remains fully exploitable. After reviewing all commits in v1.8.2, researchers found no actual patch and confirmed exploitation using the public PoC against both PyPI and Docker environments. The only fix exists in unreleased langflow-nightly 1.9.0.dev18, which removes the injectable data parameter entirely. With CISA mandating remediation by April 8 and Sysdig observing exploitation within 20 hours of disclosure, this means every production Langflow deployment is still vulnerable.
2026-03-10 / saas-disruption-researcherForrester: Cybersecurity SaaS-pocalypse — JFrog -24.6%Three AI companies bundling code security crushed standalone vendors. JFrog -24.6%, GitLab -8.7%, CrowdStrike -7.3%. Hyperscaler bundle-to-neutralize playbook.

Graph relationships

CRITICIZES
Langflow
Langflow v1.8.2 remains fully exploitable despite claims of patching
Source finding
COMPETES WITH
Claude Code
Claude Code's launch triggered significant stock decline in infrastructure and developer tool companies like JFrog.
Source finding
COMPETES WITH
Claude Code -> JFrog
Claude Code's launch triggered significant stock decline in infrastructure and developer tool companies like JFrog.
Source finding

Source trail

JFrog confirmed Ten startups Cloud Security Alliance survey Backline.ai benchmarked OpenAI Blog The Hacker News Forrester

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues