The Shai-Hulud supply-chain malware campaign is exploiting the automated systems developers trust to publish software safely.

Copycat hackers are competing to win $1,000 for the largest supply chain attack using Shai-Hulud, an open-sourced worm that has brought down a few major open-source projects. Malicious NPM packages ...

Socket raises $60M to expand AI-driven software supply chain security and protect developers from cyber threats worldwide.

A legacy Windows scripting utility tied to Internet Explorer is still being used in modern malware campaigns, researchers say ...

A desktop app that lets users stream any movie, TV series, or anime for free and without ads hit the top of GitHub’s global ...