JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

New research shows that up to a half of all HTML email attachments are malicious, and not just because of a few massive campaigns. Researchers warn that attackers are relying more on malicious HTML ...

Process improvements and a closer look at funding streams will provide far more protection for the open source software we ...

Earlier this week, the Npm package manager suffered what may be its worst security incident to date. Unknown cybercriminals ...