The Shai-Hulud supply-chain malware campaign is exploiting the automated systems developers trust to publish software safely.

We live in a time of wonder and magic. I just used Google AI Studio to create a full-featured Markdown editor and it's ...

Extends security support beyond Nuxt 3 end-of-life, helping organizations protect production Vue.js applications and ...

Dify, a popular low-code AI application development platform with over 142,000 stars on GitHub, was found to contain critical vulnerabilities that allowed a one-click account takeover. Imperva ...

The world’s largest open-source registry, node package manager (npm), has been hit by another fast-moving malware attack, ...

Attackers are increasingly abusing Microsoft’s legacy MSHTA utility to silently deliver malware, stealers, and persistent ...

A new infostealer variant targets macOS users by spoofing Apple, Microsoft, and Google and then then gets to work searching ...

Every time a professional opens LinkedIn in a Chrome-based browser today, hidden JavaScript silently probes their device for ...

Attackers performed an email takeover attack on a dormant maintainer account and published new node-ipc versions containing ...

If you are building a simple dashboard or a form-based application, the traditional JSON API (REST or GraphQL) approach is ...

On April 29, 2026, someone hijacked four widely used SAP packages on the npm registry, slipped credential-stealing malware ...

Over 170 TanStack, Mistral AI, OpenSearch, UiPath, and other packages were affected in a new Mini Shai-Hulud supply chain ...