Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...
Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.
A widely used open-source tool stole passwords and API keys from over 1 million users. Here's what Ghanaian developers need ...
GlassWorm, a known malware, has put 73 harmful extensions into OpenVSX's registry. Hackers use it to steal developers' crypto ...
A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 "sleeper" extensions that turn malicious ...