A major JavaScript supply-chain attack has compromised hundreds of software packages — including at least 10 used widely ...
Charlie Eriksen, a researcher at Aikido, identified the infected libraries and confirmed each detection manually to minimize ...
Shai-Hulud malware infiltrates 490 NPM packages, stealing API keys and credentials from ENS and major crypto development ...
The notification arrived on September 14, 2025, at 17:58 UTC. Somewhere in the sprawling npm registry—home to 2.5 million JavaScript packages that power everything from banking apps to smart ...
China-linked APT24 hackers have been using a previously undocumented malware called BadAudio in a three-year espionage ...
A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser — and potentially leverage the IDE’s privileges to perform system tasks.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback