Weedhack malware targets Minecraft players via YouTube and SEO poisoning since Jan 2026, enabling credential theft and remote ...
A large-scale campaign impersonates open-source and freeware project portals to redirect users through a gated TDS and ...
The codexui-android npm package silently exfiltrated OpenAI Codex auth tokens to an attacker server for a month, affecting 29,000 weekly downloads.
Dashlane said that attackers mounted a coordinated hacking campaign against a large base of its users in an attempt to ...
CVE Lite CLI helps developers quickly identify and fix vulnerable npm dependencies during development, reducing delays and ...
A new supply-chain attack has infected 36 packages on the Node Package Manager (npm) index with infostealer malware called IronWorm. The malware targets 86 environment variables (key-value pairs) and ...
Cybersecurity researchers at Aikido Security have uncovered a malicious supply chain attack targeting OpenAI Codex developers via the npm package “codexui-android”. While the associated GitHub ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results