Claude Code, Anthropic’s top AI agent, just suffered a major source code leak. Version 2.1.88 exposed 512,000 lines of ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...
Agents, browser debugging, and deprecation of Edit Mode are all highlighted in the latest versions of the popular code editor ...
Magecart hides payload in favicon EXIF via third-party scripts, bypassing static analysis and stealing checkout data at ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...
Free cryptographically verified code quality scoring for software procurement. The best software wins. Not the best ...
The LeakNet ransomware gang is now using the ClickFix technique for initial access into corporate environments and deploys a ...
Researchers from Google LLC and two cybersecurity companies have identified a set of zero-day exploits in iOS 18. Google’s ...
You won't have to switch to a browser as often.
A threat actor who stole credentials from a legitimate node package manager (npm) publisher has spread a persistent, ...