A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...
BUCHAREST, Romania — MegaConvert.io is a free online file converter that supports 500+ format pairs in 47 languages — convert PDF, images, video, audio, ebooks, and more from any browser in seconds, ...
A malicious version of the PyTorch Lightning package published on the Python Package Index (PyPI) delivers a credential-stealing payload targeting browsers, environment files, and cloud services. The ...
The world’s largest open-source registry, node package manager (npm), has been hit by another fast-moving malware attack, ...
Microsoft has identified an active supply chain attack targeting the npm package ecosystem. On May 28, 2026, a single threat actor operating under the newly created maintainer alias vpmdhaj (a39155771 ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results