The open-source database RxDB 17 now synchronizes data directly via Google Drive or OneDrive – developers no longer need ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

Developers using the axios package from npm may have downloaded a malicous version that drops a Remote Access Trojan ...

Anthropic has accidentally exposed Claude Code's full 512,000-line TypeScript source via an npm source map, revealing ...

EmDash is an open-source CMS built on Astro and Cloudflare. Featuring sandboxed plugins, AI-native tools, and 66% faster ...

A version of the AI coding tool in Anthropic's npm registry included a source map file, which leads to the full proprietary ...

The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...

Anthropic is scrambling to contain the leak, but the AI coding agent is spreading far and wide and being picked apart.

A simple prompt sent Claude Code on a mission that uncovered major security vulnerabilities in popular text editors — and ...

Claude Code 2.1.88 leak exposed 512,000 lines via npm error, fueling supply chain risks and typosquatting attacks.

The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...

A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...