TeamPCP strikes again, with almost identical code to LiteLLM.
The cybercrime crew linked to the Trivy supply-chain attack has struck again, this time pushing malicious Telnyx package ...
Over 1,700 malicious packages since Jan 2025 fuel cross-ecosystem supply chain attacks, enabling espionage and financial ...
It was originally planned to open in summer 2024, but was delayed after defects were found.
OpenAI revoked its macOS signing certificate after a malicious Axios dependency incident on March 31, 2026, preventing ...
FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...
TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ ...
The threat group's shift to speedy attacks on AWS, Azure, and SaaS instances shows organizations need to respond quickly to ...
Another North Yorkshire library joins a project helping book borrowers grow their own produce.
LangChain and LangGraph have patched three high-severity and critical bugs.
Natural product libraries enable the discovery of bioactive compounds through diverse screening workflows. Inherent ...
With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...