The JavaScript development community faced one of its most sophisticated supply chain attacks in September, when a ...

A new supply-chain attack compromised at least 187 npm packages, targeting developer secrets across software projects Shai-Hulud worm looks to steal credentials, modify packages, and spread malware ...

Security researchers worldwide are warning about a supply-chain attack on the Node Package Manager (NPM), where a ...

Researchers have released a report detailing how a recent WinRAR path traversal vulnerability tracked as CVE-2025-8088 was exploited in zero-day attacks by the Russian 'RomCom' hacking group to drop ...

The Pakistani APT36 cyberspies are using Linux .desktop files to load malware in new attacks against government and defense entities in India. Although the attacks described in the two reports use ...