The 'Scattered Lapsus$ Hunters' group has taken credit for the cyberattack on JLR. The luxury brand, which the Tata Group ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

The malware was found in 18 npm packages that together are usually downloaded over 2 billion times per week. But the security ...

A new digital supply chain attack has targeted popular open-source npm packages with at least two billion downloads per week. On Sept. 8, Josh Junon, a package maintainer whose account was at the ...

Malware hidden in widely used libraries like chalk and debug hijacked crypto transactions via browser APIs, exposing deep ...