What you see is not always what you get as cybercriminals increasingly weaponize SVG files as delivery vectors for stealthy malware.

A threat actor named WhiteCobra has targeting VSCode, Cursor, and Windsurf users by planting 24 malicious extensions in the ...

"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...

Security researchers have identified at least 187 npm packages compromised in an ongoing supply chain attack. The coordinated ...

Confused by APT, DNF, PACMAN, or Zypper? This guide explains the default package managers of various Linux distributions.

Spotify announced a new Lossless Listening feature, which uses audio files that are compressed to retain all of songs' original recording information.

August 2025 campaigns deliver kkRAT and Gh0st RAT variants via SEO poisoning, disabling antivirus to hijack crypto wallets.

Programmers using popular AI tools (Cursor, Windsurf, VSCode) get their crypto stolen by hackers, who infiltrate extension marketplaces.

Regression Analysis Needs Your Input Our automated system analyzed this issue but couldn't determine with confidence if this is a regression bug. A regression bug is when functionality that previously ...

Halud, is compromising hundreds of NPM packages, spreading self-replicating malware, exfiltrating data, and turning private ...

Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...

Customers who bought Poppi between Jan. 23, 2020, and July 18, 2025, are eligible for a portion of the $8.9 million class action settlement payment.