Chainguard, the trusted foundation for software development and deployment, today announced Chainguard Libraries for JavaScript, a collection of trusted builds of thousands of common JavaScript ...

In light of recent cyberattacks and growing security concerns, GitHub is taking immediate and direct action to secure the ...

A newly-discovered malicious package with layers of obfuscation is disguised as a utility library, with malware essentially ...

A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.

Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web browser. The package, masquerading as a utility library, leverages this ...

What the Script: Supply chain attacks are traditionally designed to inflict maximum damage on structured organizations or companies. However, when such an attack compromises a supply chain that an ...

An attack targeting the Node.js ecosystem was just identified — but not before it compromised 18 npm packages that account ...

RevengeHotels used AI-generated phishing scripts to deploy Venom RAT in Brazil hotels in 2025, stealing travelers’ credit ...

Apple's Safari browser is exclusive to the company's own devices, but it brings plenty to the table. How does it stack up ...

North Korea’s Contagious Interview spreads AkdoorTea and TsunamiKit to steal crypto and infiltrate global developers.

You'll see an iOS 18.7 update, but that's not the one you want to select. Instead, just below that tap on Upgrade to iOS 26 and on the ensuing screen tap Update Now. You can also tap Update Tonight, ...

With npm packages embedded in financial systems, e-commerce platforms, and enterprise applications, the compromise poses a ...