The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...

GlassWorm attack uses stolen GitHub tokens to inject malware into Python repositories, exposing developers to supply chain ...

Aqua Security’s Trivy vulnerability scanner was compromised in a supply chain attack, leading to information-stealing ...

GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...

The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...

A phishing campaign targeting healthcare, government, hospitality, and education sectors uses several evasion techniques to ...

A threat actor who stole credentials from a legitimate node package manager (npm) publisher has spread a persistent, ...

Hackers have compromised virtually all versions of Aqua Security’s widely used Trivy vulnerability scanner in an ongoing ...

Langflow CVE-2026-33017 exploited in 20 hours after disclosure, enabling RCE via exec(), exposing systems before patching ...

AI is burying open source maintainers under a flood of automated security reports they don't have the time or tools to ...

You don't need to be a developer to build your own crypto bot. Here's how traders are doing it in 30 minutes, for free.

If you suspect you were running a compromised version, treat all pipeline secrets as compromised and rotate immediately,’ ...