India’s cybersecurity agency warns of a fast-spreading npm supply chain worm, urging startups and ITes firms to secure ...

In light of recent cyberattacks and growing security concerns, GitHub is taking immediate and direct action to secure the ...

Following a number of recent high-profile attacks and hacking attempts, GitHub has decided to make substantial changes to the ...

An open source software supply-chain vulnerability is an exploitable weakness in trusted software caused by a third-party, ...

Halud, is compromising hundreds of NPM packages, spreading self-replicating malware, exfiltrating data, and turning private ...

The vendor was one of a many whose code modules were infected by a never before seen strand of malware known as "Shai-Hulud." ...

"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...

Security researchers have identified at least 187 npm packages compromised in an ongoing supply chain attack. The coordinated ...

The novel malware strain is being dubbed Shai-Hulud — after the name for the giant sandworms in Frank Herbert’s Dune novel ...

After warning 9to5Mac last month about undetectable Mac malware hidden in a fake PDF converter site, Mosyle, a leader in Apple device management and security, has now uncovered a new infostealer.

The credential stealer harvested username, password, and 2FA codes before sending them to a remote host. With full access, the attacker republished every "qix" package with a crypto-focused payload.

A successful phishing attack against a developer has resulted in one of the largest supply chain compromises to date, adding malicious code to JavaScript packages with around 2.7 billion weekly ...