A newly-discovered malicious package with layers of obfuscation is disguised as a utility library, with malware essentially ...

Microsoft Threat Intelligence stopped an AI-driven credential phishing campaign using SVG files disguised as PDFs ...

Chainguard, the trusted foundation for software development and deployment, today announced Chainguard Libraries for JavaScript, a collection of trusted builds of thousands of common JavaScript ...

Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web ...

Hackers behind a phishing campaign appear to have used artificial intelligence-generated code to hide malware behind a wall ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

Fresenius Kabi, a part of the global healthcare company of Fresenius, announced today that the Centers for Medicare and Medicaid Services (CMS) issued a permanent, product-specific billing code for ...

Dozens of npm libraries, including a color library with over 2 million downloads a week, have been replaced with novel ...

Chainguard Libraries for JavaScript include builds that are malware-resistant and built from source on SLSA L2 infrastructure ...

RevengeHotels used AI-generated phishing scripts to deploy Venom RAT in Brazil hotels in 2025, stealing travelers’ credit card data and evading defens ...

The landscape of enterprise frontend development has undergone dramatic transformation over the past decade, with modern applications requiring unprecedented levels of scalability, security, and user ...