Cursor launched a public beta for iPhone and iPad that lets paid subscribers run, monitor, and review AI coding agents on ...
New benchmarks show semantic code graphs helping coding agents find change locations faster and complete updates more ...
Everyone and everything is vulnerable.
Secure software supply chain solution provider Chainguard Inc. today expanded its Chainguard Repository product with malware ...
Eclipse Open VSX has reached 1.0.0, highlighting its role as a vendor-neutral registry for VS Code-compatible extensions.
Cordyceps, a systemic class of exploitable CI/CD vulnerabilities, allows unauthenticated attackers to hijack developer ...
A malicious npm package has been caught impersonating one of the JavaScript ecosystem's most widely used build tools. The ...
Mastra AI’s 144 JavaScript packages was executed in just 88 minutes by North Korea’s Sapphire Sleet hacking group, which ...
Starting on June 11, 2026, the Arch User Repository (AUR) was targeted by malware which rapidly compromised over 1,500 packages. The AUR repository allows for abandoned community packages to be taken ...
From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...
The tool has already blocked more than 52,000 risky npm packages as supply chain attacks continue to hit software teams.
Attackers hijacked over 1,500 packages in Arch Linux's AUR to plant a credential stealer. The official repos are safe, but the trust model took the hit.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results