An attack targeting the Node.js ecosystem was just identified — but not before it compromised 18 npm packages that account ...

A weakness in the Cursor code editor exposes developers to the risk of automatically executing tasks in a malicious repository as soon as it's opened.

Attackers are evolving their malware delivery tactics by weaponing malicious prompts embedded in document macros to hack AI ...