Secure software supply chain solution provider Chainguard Inc. today expanded its Chainguard Repository product with malware ...

SocGholish uses traffic distribution systems (TDSs) to provide initial access into victims' networks for cybercrime groups ...

Mastra AI’s 144 JavaScript packages was executed in just 88 minutes by North Korea’s Sapphire Sleet hacking group, which ...

Microsoft has attributed a recent Mastra AI supply chain attack that compromised more than 140 npm packages to the North Korean hacking group Sapphire Sleet, also known as BlueNoroff. This attribution ...

IntroductionOn May 14, 2026, the Zscaler ThreatLabz team identified unusually high activity associated with the threat actor SmartApeSG to deploy malware. During our examination, we discovered ...

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

Mastra npm packages added easy-day-js malware, exposing developer systems and CI runners to infostealer risks.

If you got rejected by Faze clan, you either don’t have enough clout or can’t no-scope. Let’s be honest. It’s probably the second thing, which is why you will need No-Scope Arcade codes to improve ...

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how quickly a compromised package can propagate through the ecosystem. Attackers ...

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. When generative AI tools like ChatGPT first became household names, prompt engineering ...

NEW YORK, March 9 (Reuters) - Anthropic on Monday filed a lawsuit to block the Pentagon from placing it on a national security blacklist, escalating the artificial intelligence lab’s high-stakes ...