Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...
Claude Code 2.1.88 leak exposed 512,000 lines via npm error, fueling supply chain risks and typosquatting attacks.
Cisco has suffered a cyberattack after threat actors used stolen credentials from the recent Trivy supply chain attack to ...
Trivy attack force-pushed 75 tags via GitHub Actions, exposing CI/CD secrets, enabling data theft and persistence across ...
Dangerous iPhone hack code tied to DarkSword has reportedly leaked onto GitHub, raising fresh risks for users with older ...
Update, July 22, 2025: This story, originally published on July 20, has been updated with an expert counterpoint to the idea that it’s the delivery mechanism being what’s important in the latest ...