Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...

If MediaFire shows a download error when you try to download a file in your browser, it usually means the file page loads correctly, but the actual ...

Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used ...

OpenAI is mandating macOS users update ChatGPT Desktop and other apps by May 8, 2026, due to a compromised JavaScript library ...

SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.

The NHS Couch to 5k app is celebrating its 10-year anniversary having reached more than eight million downloads.

LofyGang resurfaces with LofyStealer disguised as Minecraft hack, exfiltrating IBANs and passwords to 24.152.36[.]241, ...

John Warnick, owner of Celeritas, a consulting firm that works with internet service providers (ISPs) like Quantum Fiber from ...

Fake packages aim to steal data, credentials, and secrets, and to infect every package created using them, in what could be ...

The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

The threat actor seeding the Open VSX code marketplace with fraudulent extensions that download the GlassWorm malware has ...

GlassWorm, a known malware, has put 73 harmful extensions into OpenVSX's registry. Hackers use it to steal developers' crypto ...