GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.

GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...

Malwarebytes warns that a fake Microsoft support site is distributing password-stealing malware through a spoofed Windows ...

IntroductionOn March 31, 2026, Anthropic accidentally exposed the full source code of Claude Code (its flagship terminal-based AI coding agent) through a 59.8 MB JavaScript source map (.map) file ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...

A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how quickly a compromised package can propagate through the ecosystem.

The maintainer account for the axios package on npm was compromised to inject a remote access trojan for Windows, macOS, and Linux.

Thirty years of bad decisions finally caught up with your Task Manager ...