Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar ...
A new wave of device code phishing shows how threat actors are scaling account compromise using AI and end‑to‑end automation.
A threat actor has used 36 malicious NPM packages posing as Strapi plugins to distribute malware targeting Redis, Docker, and ...