A newly-discovered malicious package with layers of obfuscation is disguised as a utility library, with malware essentially ...

Chainguard, the trusted foundation for software development and deployment, today announced Chainguard Libraries for JavaScript, a collection of trusted builds of thousands of common JavaScript ...

Microsoft Threat Intelligence stopped an AI-driven credential phishing campaign using SVG files disguised as PDFs ...

Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web ...

Hackers behind a phishing campaign appear to have used artificial intelligence-generated code to hide malware behind a wall ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

Dozens of npm libraries, including a color library with over 2 million downloads a week, have been replaced with novel ...

Fresenius Kabi, a part of the global healthcare company of Fresenius, announced today that the Centers for Medicare and Medicaid Services (CMS) issued a permanent, product-specific billing code for ...

Chainguard Libraries for JavaScript include builds that are malware-resistant and built from source on SLSA L2 infrastructure ...

RevengeHotels used AI-generated phishing scripts to deploy Venom RAT in Brazil hotels in 2025, stealing travelers’ credit card data and evading defens ...

Zapier reports on vibe coding, highlighting best practices like planning, using product requirements documents, and testing ...

A malicious npm package named Fezbox has been found using an unusual technique to conceal harmful code. The package employs a ...