GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.

GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

Malwarebytes warns that a fake Microsoft support site is distributing password-stealing malware through a spoofed Windows ...

The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...

IntroductionOn March 31, 2026, Anthropic accidentally exposed the full source code of Claude Code (its flagship terminal-based AI coding agent) through a 59.8 MB JavaScript source map (.map) file ...

A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.

Although executed by different attackers – Axios by North Korean-linked goons, and Trivy et al. by a loosely knit band of ...

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how quickly a compromised package can propagate through the ecosystem.

The maintainer account for the axios package on npm was compromised to inject a remote access trojan for Windows, macOS, and Linux.

Thirty years of bad decisions finally caught up with your Task Manager ...