North Korean state-sponsored advanced persistent threat operation Famous Chollima has published 26 illicit npm packages impersonating developer...
supply-chain
The malicious version 5.8 of QuickLens was pushed to approximately 7,000 users on February 17, 2026, after...
The compromised Go module injects malicious code into the "ssh/terminal/terminal.go" file, specifically within the "ReadPassword()" function.
Rapid drone production is essential to modern warfare. The U.S. has a lot of catching up to...
The Black Duck 2026 OSSRA report explores AI as one of several factors in the historic increase....
Harness Artifact Registry centralizes and manages all machine-generated outputs from the development lifecycle, including binaries, container images,...
Ad tech firm Optimizely, which counts PayPal, Salesforce, Vodafone, and Zoom among its clients, has been impacted...
A new npm supply chain attack injects a malicious MCP server and targets LLM API keys.
The attack involved an unauthorized party gaining access to Cline CLI's npm package via a compromised token.
CyberScoop reports that the massive Change Healthcare breach in 2024, which stemmed from the lack of multi-factor...