Microsoft says latest attack targets Leo Platform and RStreams packages, harvesting creds and going after more maintainers ...

Moving one folder quadrupled my build speeds without touching a single config.

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.

A malicious npm package has been caught impersonating one of the JavaScript ecosystem's most widely used build tools. The ...

The infostealer was delivered via CVE-2026-48558, a critical authentication bypass vulnerability in SimpleHelp.

Microsoft Threat Intelligence identified an active multi-stage intrusion campaign targeting hospitality organizations in ...

Beach Day API, a developer-first REST API powered by VersusMedia, today announced the launch of its real-time beach and ocean ...

Microsoft says hotel phishing emails are using Calendly links and photo ZIP files to drop the TonRAT Node.js implant on front ...

Vivani Medical, Inc. (Nasdaq: VANI) (“Vivani” or the “Company”), a clinical-stage biopharmaceutical company developing ...

Secure software supply chain solution provider Chainguard Inc. today expanded its Chainguard Repository product with malware ...

Vivani Medical, Inc. (NASDAQ: VANI) (“Vivani” or the “Company”), a clinical-stage biopharmaceutical company developing miniature, ultra long-acting drug implants, today announced the ...

Figma Config 2026 closed Thursday with Code Layers for GitHub-linked canvas editing, Figma Motion in open beta with CSS and ...