Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering credential-stealing malware...

A massive supply chain breach affecting 84 npm packages within the widely used TanStack ecosystem. Malicious actors compromised these packages by...

Six-minute supply chain blitz pushed 84 malicious versions with credential theft and disk-wiping code This article has been indexed from...

A sprawling supply chain attack has put software developers worldwide on high alert after hackers compromised more than 170 npm packages and two PyPI...

Hackers have launched a large-scale supply chain attack by compromising more than 170 npm packages and two PyPI libraries, collectively downloaded...

A supply chain attack on SAP npm packages used preinstall scripts to steal developer and CI/CD credentials. The post SAP npm Supply Chain Attack...

A supply chain attack on SAP npm packages used preinstall scripts to steal developer and CI/CD credentials. The post SAP npm Supply Chain Attack...

A new supply chain attack dubbed Mini Shai-Hulud has compromised more than 400 malicious versions across 170 software packages, with high-profile...

Braintrust warned customers to rotate API keys after hackers breached an AWS account, exposing secrets tied to cloud-based AI models. AI observability...

QLNX is a newly documented Linux remote access trojan (RAT) that targets the theft on developers’ and DevOps credentials to hijack software supply...