A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be ...

Cybersecurity researchers have discovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate " ...

Udio, an AI song generation platform, has announced a 48-hour window starting Monday for users to download their songs. This ...

Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component ...

"The proliferation of cybercrime services supporting each step of the Booking.com attack chain reflects a professionalization ...

The typosquatted packages auto-execute on installation, fingerprint victims by IP, and deploy a PyInstaller binary to harvest ...

GRAVITY Co., Ltd. (NasdaqGM: GRVY) (“Gravity” or “Company”), a developer and publisher of online and mobile games, announced that Ragnarok: Twilight, ...

An advanced malware campaign on the npm registry steals the very keys that control enterprise cloud infrastructure.

The UK's Information Commissioner's Office (ICO) has issued a £14 million ($18.6 million) penalty to outsourcing giant Capita following a catastrophic 2023 cyberattack that exposed the personal data ...

Developers will have to contend with a dormant turned active malicious code on Visual Studio Code (VS Code) extensions, which ...