A widely used JavaScript inter-process communication library has been weaponized again. Socket and Stepsecurity have confirmed that three newly...

Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering credential-stealing malware...

Cybersecurity researchers are sounding the alarm about what has been described as “malicious activity” in newly published versions of node-ipc....

A sprawling supply chain attack has put software developers worldwide on high alert after hackers compromised more than 170 npm packages and two PyPI...

QLNX is a newly documented Linux remote access trojan (RAT) that targets the theft on developers’ and DevOps credentials to hijack software supply...

QLNX is a newly documented Linux remote access trojan (RAT) that targets the theft on developers’ and DevOps credentials to hijack software supply...

Hackers have launched a large-scale supply chain attack by compromising more than 170 npm packages and two PyPI libraries, collectively downloaded...

  Python’s software supply chain has been compromised, which targeted the popular PyPI package Lightning and exposed downstream machine learning...

  Python’s software supply chain has been compromised, which targeted the popular PyPI package Lightning and exposed downstream machine learning...

A newly identified malware campaign is targeting senior executives and government investigators across Southeast Asia, using a modular Remote Access...