Four npm packages linked to SAP's Cloud Application Programming Model were hijacked. The hackers added code that steals ...

A North Korean APT has crafted malicious software packages to appeal to AI coding agents, while ‘slopsquatting’ shows the ...

CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...

Several SAP npm packages were exposed to a supply chain attack. The hacker group TeamPCP is behind it, say security ...

In March 2026, someone hijacked a maintainer account for Axios, a JavaScript HTTP library downloaded more than 45 million ...

A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary ...

BBVA´s specialized banking unit for high-growth innovative companies and (NPM), a leading provider of liquidity, capital and investment solutions ...

Cline is one of the most widely adopted open-source AI coding assistants, and its Kanban feature provides a web-based project ...

Malicious code inserted into four SAP-related npm packages exposed developer workstations and automated build systems to credential theft, marking a sharp escalation in attacks against open-source ...

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...

Anthropic builds powerful AI models, but the company's fear tactics, security incidents and service outages should make ...