Fortinet warns Stealit malware uses Node.js SEA and fake installers to deliver stealers, RATs, and persistence.

流行的JavaScript包Happy DOM曝出严重安全漏洞，该漏洞可使攻击者逃逸Node.js虚拟机（VM）上下文并在主机系统上执行任意代码。该漏洞被追踪为CVE-2025-61927，CVSSv4评分为9.4。

A new campaign distributing the Stealit infostealer employs previously unknown malware delivery techniques and infrastructure ...

Burgeoning artificial intelligence technologies are taking some of the complexity out of programming with tools that help ...

CERT-In has issued a high-severity warning over a major npm ecosystem compromise named ‘Shai-Hulud,’ targeting credentials linked to Google Cloud, AWS, Microsoft Azure, and developer accounts.

Codex gives software developers a first-rate coding agent in their terminal and their IDE, along with the ability to delegate ...

XWorm V6.0 is designed to connect to its C2 server at 94.159.113 [.]64 on port 4411 and supports a command called "plugin" to ...

Security researchers worldwide are warning about a supply-chain attack on the Node Package Manager (NPM), where a ...