Supply chain attacks feel like they're becoming more and more common.
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...
A cyber attack hit LiteLLM, an open-source library used in many AI systems, carrying malicious code that stole credentials ...
OpenAI has agreed to acquire Astral, a startup behind widely used Python development tools, in a deal designed to sharpen its ...
It is exactly this backdoor that had Google conclude this was a North Korea-sponsored campaign. GTIG said WAVESHAPER.V2 is an ...
Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...
How I used Gemini to replace YouTube's missing comment alerts - in under an hour ...