TrapDoor spread 34 malicious packages across npm, PyPI, and Crates.io, stealing developer credentials and enabling persistence.
10h
Megalodon cyberattack infects 5,500 GitHub open-source repositories with malware, researchers say
A new report in Security Week warns about a cyberattack that infected 5,561 GitHub open-source repositories with malware.
GitHub confirmed an attacker was able to access its internal repositories after a code extension breach, with TeamPCP ...
GitHub confirmed attackers stole 3,800 internal repositories via a poisoned VS Code extension. The same threat group, TeamPCP ...
GitHub says a poisoned VS Code extension exposed 3,800 internal repos as Binance founder CZ tells crypto devs to rotate keys.
The Shai-Hulud supply-chain malware campaign is exploiting the automated systems developers trust to publish software safely.
Morning Overview on MSN
The GitHub break-in began on one developer’s laptop and a poisoned coding add-on — then spread to the keys guarding code inside thousands of companies
Sometime in early 2026, a software developer did what millions of programmers do every week: updated a dependency. The ...
Another massive supply chain attack is spreading. Hundreds of compromised NPM packages are being detected, with hackers using stolen secrets to create over 2,200 public GitHub repositories, all ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results