"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...

A threat actor named WhiteCobra has targeting VSCode, Cursor, and Windsurf users by planting 24 malicious extensions in the ...

A newly discovered cross-platform malware dubbed ModStealer is slipping past antivirus systems and targeting crypto wallets ...

Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...

New integrations with Mimir, Iconik, Embrace, and Broadteam enhance interoperability and streamline workflows. Telestream to ...