Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...
Attackers infected all versions with the same credential-stealing malware that, on Wednesday, poisoned multiple npm packages ...
Several npm packages for SAP's cloud application development ecosystem have been compromised as TeamPCP's supply chain ...
Malicious npm packages have been identified distributing malware that steals credentials and attempts to spread across ...
Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.
Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...
The now‑patched flaw allowed authenticated users to execute arbitrary code via crafted git push requests, affecting ...
GitHub says modern supply-chain attacks increasingly start with secret exfiltration from GitHub Actions, not just poisoned packages further downstream.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results