A sophisticated supply chain attack has emerged targeting cryptocurrency developers through the NuGet package ecosystem. Cybersecurity researchers...

An active campaign named 'PhantomRaven' is targeting developers with dozens of malicious npm packages that steal authentication tokens, CI/CD...

An active campaign named 'PhantomRaven' is targeting developers with dozens of malicious npm packages that steal authentication tokens, CI/CD...

The Open VSX registry rotated access tokens after they were accidentally leaked by developers in public repositories and allowed threat actors to...

The Open VSX registry rotated access tokens after they were accidentally leaked by developers in public repositories and allowed threat actors to...

A sophisticated vulnerability in Microsoft 365 Copilot (M365 Copilot) that allows attackers to steal sensitive tenant data, including recent emails,...

Cybersecurity researchers have discovered a self-propagating worm that spreads via Visual Studio Code (VS Code) extensions on the Open VSX Registry...

Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component that collects sensitive...

Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component that collects sensitive...

A sophisticated malware campaign exploiting Near Field Communication technology on Android devices has expanded dramatically since its emergence in...