Morning Overview on MSN
Malicious open-source packages have surged 73% in 2026 as attackers poison the software supply chain
In March 2026, someone hijacked a maintainer account for Axios, a JavaScript HTTP library downloaded more than 45 million ...
A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary ...
Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...
Morning Overview on MSN
Malicious open-source packages have surged 73% in 2026 according to new research
Every time a developer types npm install, they are placing a bet that the package they are pulling into their project is not ...
Cline is one of the most widely adopted open-source AI coding assistants, and its Kanban feature provides a web-based project ...
CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...
ZiChatBot malware spread via 3 PyPI packages in July 2025 uses Zulip APIs as C2, enabling stealthy attacks across systems ...
The attack on the Trellix source code repository disclosed last week has been claimed by the RansomHouse threat group, which leaked a small set of images as proof of the intrusion. Yesterday, the ...
CLI-Anything generates SKILL.md files that AI agents trust and execute. Snyk found 13.4% of agent skills contain critical ...
After the CopyFail vulnerability gave root access from any user on almost all distributions last week, this week we’ve got DirtyFrag. This chains the vulnerability in CopyFail (xfrm-ESP) and ...
Dive into The Register's online archive of incisive tech news reporting, features, and analysis dating back to 1998 ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results