"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...

A threat actor named WhiteCobra has targeting VSCode, Cursor, and Windsurf users by planting 24 malicious extensions in the ...

A cross-platform malware dubbed ModStealer is slipping past antivirus systems, targeting crypto wallets on Windows, macOS, ...

Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...

New integrations with Mimir, Iconik, Embrace, and Broadteam enhance interoperability and streamline workflows. Telestream to ...