Cybersecurity researchers have discovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate " ...

More than 150,000 malicious packages were published in the NPM registry as part of a recently uncovered spam campaign, Amazon ...

The GlassWorm malware has reared its ugly head again in the Open VSX registry, roughly two weeks after being removed.

The GlassWorm malware campaign, which impacted the OpenVSX and Visual Studio Code marketplaces last month, has returned with ...

AI-driven supply chain attacks surged 156% as breaches grew harder to detect and regulators imposed massive fines.

Developers will have to contend with a dormant turned active malicious code on Visual Studio Code (VS Code) extensions, which ...

Let’s talk about LANDFALL. That was an Android spyware campaign specifically targeted at Samsung devices. The discovery story ...

In a recent blog post Google announced that the early access phase of its Android Developer Verification program has ...

Two separate research studies have found companies are leaking information on GitHub, and the site itself is being targeted.

A self-spreading package published on npm spams the registry by spawning new packages every every seven seconds, creating ...

Amazon spilled the TEA Yet another supply chain attack has hit the npm registry in what Amazon describes as "one of the ...