Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
A malware campaign uses WhatsApp messages to deliver VBS scripts that initiate a multi-stage infection chain. The attack ...
The TeamPCP hacking group has hacked the Telnyx PyPI package as part of a supply chain campaign targeting the broad OSS ecosystem.
There’s a new scam to look out for in a place you wouldn’t expect. Security experts at the Identity Theft Resource Center ...
DeepLoad exploits ClickFix and WMI persistence to steal credentials, enabling stealth reinfection after three days.
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
A newly developed bioinformatics tool, MPGK, integrates Mendelian randomization, polygenic risk score, Gene Ontology, and the ...
TeamPCP strikes again, with almost identical code to LiteLLM.