TrapDoor spread 34 malicious packages across npm, PyPI, and Crates.io, stealing developer credentials and enabling persistence.
Google's Threat Intelligence Group thwarted the first known AI-developed zero-day exploit targeting two-factor authentication, preventing a planned mass-scale cyberattack.
The OWASP-backed tool scans JavaScript and TypeScript lockfiles locally, aiming to help developers catch and remediate dependency risks before CI failures.
Developer platform Socket says a malware called TrapDoor is targeting crypto and AI developers across npm, PyPI and Crates, aiming to steal crypto wallet info and browser data.
12h
Megalodon cyberattack infects 5,500 GitHub open-source repositories with malware, researchers say
Security researchers say 5,500 GitHub repositories have been affected by the attack.
Supply chain chaos, old bugs, smarter phishing, and botnets everywhere — here’s what broke the internet this week.
Bumblebee from Perplexity scans developer machines for compromised packages and AI tool configs, without triggering malware.
TeamPCP is an increasingly notorious group of cybercriminals that carry out software supply chain attacks, where hundreds of ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results