Malicious npm package '@openclaw-ai/openclawai' downloaded 178 times installs GhostLoader RAT, stealing credentials and crypto wallets.
Vue Router 5.0 has integrated unplugin-vue-router into its core, enhancing file-based routing and TypeScript support. This transition release boasts no breaking changes, simplifies dependencies, and ...
The module targets Claude Code, Claude Desktop, Cursor, Microsoft Visual Studio Code (VS Code) Continue, and Windsurf. It also harvests API keys for nine large language models (LLM) providers: ...
Developers Can Now Search, Analyze, and Secure PHP Dependencies with AI-Powered Supply Chain Protection It would be ...
A bug in VS Code's Snap package leaves deleted files on Linux disks, exposing sensitive data due to a flawed local trash system. Low disk space from accumulating trash files can slow systems, editors, ...
Former Neiman Marcus Group chief Geoffroy van Raemdonck, now CEO, is bringing on a fresh slate of executives — and has a $1.75 billion financing package to work with. Saks Global’s new CEO is already ...
Hundreds of trojanized versions of well-known packages such as Zapier, ENS Domains, PostHog, and Postman have been planted in the npm registry in a new Shai-Hulud supply-chain campaign. The malicious ...
Amazon researchers discovered more than 150,000 malicious packages in the NPM registry, in what they called "a defining moment in supply chain security." The packages were part of a token farming ...
A financially motivated threat actor automated the package publishing process in a coordinated tea.xyz token farming campaign. More than 150,000 malicious packages were published in the NPM registry ...
The spam campaign is likely orchestrated by an Indonesian threat actor, based on code comments and the packages’ random names. A threat actor has published tens of thousands of malicious NPM packages ...
Threat actors are finding new ways to insert invisible code or links into open source code to evade detection of software supply chain attacks. The latest example was found by researchers at ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results