A massive supply chain breach affecting 84 npm packages within the widely used TanStack ecosystem. Malicious actors compromised these packages by...

Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering credential-stealing malware...

A new supply chain attack dubbed Mini Shai-Hulud has compromised more than 400 malicious versions across 170 software packages, with high-profile...

A supply chain attack on SAP npm packages used preinstall scripts to steal developer and CI/CD credentials. The post SAP npm Supply Chain Attack...

A supply chain attack on SAP npm packages used preinstall scripts to steal developer and CI/CD credentials. The post SAP npm Supply Chain Attack...

In yet another software supply chain attack, threat actors have managed to compromise the popular Python package Lightning to push two malicious...

In yet another software supply chain attack, threat actors have managed to compromise the popular Python package Lightning to push two malicious...

A new software supply chain attack campaign has been observed using sleeper packages as a conduit to subsequently push malicious payloads that enabled...

A new software supply chain attack campaign has been observed using sleeper packages as a conduit to subsequently push malicious payloads that enabled...

Researchers demonstrated a Claude Code attack that steals OAuth tokens through malicious MCP integrations and npm hooks. The post Claude Code MCP...