News

SecurityWeek7d
Malicious NPM Packages Disguised as Express Utilities Allow Attackers to Wipe Systems
Two malicious NPM packages contain code that would delete production systems when triggered with the right credentials.
Malicious npm packages posing as utilities delete project directories
Two malicious packages have been discovered in the npm JavaScript package index, which masquerades as useful utilities but, ...
The Hacker News7d
New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally
Supply chain attack infects 16 GlueStack npm packages used by 1M weekly users, enabling malware that steals data and controls ...
SecurityWeek7d
React Native Aria Packages Backdoored in Supply Chain Attack
A threat actor published backdoored versions of 17 NPM packages from GlueStack in a fresh supply chain attack.
TMCnet5d
Public Sector Application Risk Accumulates as Security Debt Grows Across Government Systems
The data further reveals that even after two years, one-third of security flaws in government applications remain unresolved, ...
A Cat And Mouse Game: Addressing Vibe Coding’s Security Challenges
As vibe coding and associated vulnerabilities become more prevalent, organizations cannot afford to wait on ideal security ...
Orca Security Report Reveals Majority of Organizations Introducing Vulnerable AI Packages into Cloud Environments
Orca Security, a pioneer of agentless cloud security, today released the 2025 State of Cloud Security Report, providing ...
Positive movement in Scotland’s zip code madness
US Congressman Joe Courtney announced on the US House Committee on Oversight and Reform had approved the bill package that included his provision to mandate one, and only one, zip code for Scotland.
The Arts Desk6d
Samuel Arbesman: The Magic of Code review - the spark ages
The slightly overwrought subtitle gives a good indication how computer enthusiast Sam Arbesman treats his subject. Software, ...
What is a supply chain attack in crypto and how to prevent it?
Discover how supply chain attacks target crypto projects through third-party tools, and learn key strategies to protect code, infrastructure and users.