The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...
A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be ...
What if AI-assisted development is less of a threat, and more of a jetpack? This month’s report tackles vibe coding, along ...
Since its original release in 2009, checksec has become widely used in the software security community, proving useful in CTF ...
A widely-adopted JavaScript library has been found carrying a critical vulnerability which could allow threat actors to ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback