As if the Miasma situation weren't bad enough, now this weapon is spreading like wildfire. Someone open sourced the entire ...
Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based ...
Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud ...
Microsoft Threat Intelligence identified a large-scale npm supply chain attack affecting 32 maliciously modified packages across more than 90 versions under the @redhat-cloud-services npm scope. The ...
Perplexity launches Bumblebee: How its new read-only dev scanner differs from Chainguard ...
For more than a year, a self-propagating worm rode VS Code extensions, npm packages, and stolen developer credentials through ...
CrowdStrike, working with Google and the Shadowserver Foundation, said it has taken down the Glassworm botnet, a ...
Developers using open-source tools face heightened supply-chain risk after the botnet lost all four of its command channels.
Discover the top 12 tools in 2026, from Cursor to Copilot, to speed up daily dev workflows and build apps faster!
GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP, simultaneously compromised Microsoft's durabletask Python ...
A new report out today from cybersecurity company Forcepoint LLC’s X-Labs research team details a supply chain attack that compromised LiteLLM, a widely used open-source Python ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results