GigaWiper is a destructive backdoor that combines multiple wiping and ransomware-like capabilities into a single operational ...

Hackers compromised the Injective Labs SDK project's GitHub repository and used it to publish a malicious package on the Node ...

Malicious packages on the Node Package Manager (npm) and the Python Package Index (PyPI) delivered stealer malware to ...

The Armored Likho APT is targeting government and electric power organizations with modular RATs and information stealers.

Armored Likho BusySnake Stealer, a Python-based infostealer first disclosed by Kaspersky, is actively targeting government ...

Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.

On March 31, 2026, two new npm packages for updated versions of Axios, a popular HTTP client for JavaScript that simplifies making HTTP requests to a REST endpoint with over 70 million weekly ...

As these examples show, vulnerabilities can lurk within production code for years or decades—and attacks can come at any time. In 2021, a vulnerability was revealed in a system that lay at the ...

Cybersecurity researchers have disclosed what they say is an active "Shai-Hulud-like" supply chain worm campaign that has leveraged a cluster of at least 19 malicious npm packages to enable credential ...

LibreOffice 26.2 has been released with multi-user’ database support, improved Excel clipboard compatibility and a new x86-64-v2 hardware baseline for Linux users. The Document Foundation’s first ...

Get up and running with routes, views, and templates in Python’s most popular web framework, including new features found only in Django 6.0. Django is a one-size-fits-all Python web framework that ...