GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

An Old City business owner is looking to sell a building known for its 200-foot smokestack that rises above the Benjamin ...

Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...

A subsidiary of the Dallas-based biotech Lantern Pharma received federal approval to move ahead with its planned trial for a ...

UTC, Aikido Security detected an unusual pattern across the npm registry: dozens of packages from multiple organizations were receiving unauthorized patch updates, all containing the same hidden ...