Recently, npm, the essential package manager used by developers worldwide, suffered a massive supply chain attack. This ...
Cloudflare VoidZero acquisition gives a competing CDN governance of Vite, the open source JavaScript build tool with 130 ...
The Miasma supply chain campaign has sparked a fresh attack wave called Hades, this time involving 37 malicious wheel ...
Home Assistant Android update 2026.6.2 beta patches a URI intent-hijacking vulnerability that could let attackers reach ...
CrowdStrike (NASDAQ: CRWD) today released the CrowdStrike 2026 Technology Threat Landscape Report, revealing that China-nexus ...
Anthropic’s AI turned Firefox and Windows software patches into exploits within hours, including one Windows proof-of-concept ...
GitHub disabled 73 repositories across four Microsoft organizations on June 5 after the self-replicating supply-chain campaign known as ...
This week, CISA tightened patching rules, hackers provoked AI scanners. An accused Russian intel hacker appeared in court.
With npm v12, GitHub closes a central attack vector: installation scripts from dependencies will only run after explicit ...
Jake Peterson is Lifehacker’s Tech Editor, and has been covering tech news and how-tos for nearly a decade. His team covers all things technology, including AI, smartphones, computers, game consoles, ...
A malware named IronWorm spread through 36 npm packages in the Arweave ecosystem, stealing developer credentials and self ...
If reinstalling software feels repetitive, these tools have some ideas.