Turn SBOMs into supply chain defense with Heisenberg, an open source tool developed by Max Feldman and Yevhen Grinman. It ...

First steps were taken a few days ago, and more are to follow. Users and developers in the NPM ecosystem must act in the ...

North Korean hackers used fake recruiter lures and npm packages to target crypto developers in a large-scale supply-chain ...

Open source malware jumped 140% in Q3 2025, driven by high-severity data theft and backdoor attacks. Check how to defend your ...

Visual Studio developers are targeted with a self-propagating worm in a sophisticated supply chain attack through the OpenVSX ...

Treat this as an immediate security incident, CISOs advised; researchers say it’s one of the most sophisticated supply chain ...

Malicious NuGet package mimicking Nethereum stole crypto wallet keys using homoglyph tricks and fake downloads.

GlassWorm spread via 14 VS Code extensions; Solana + Google Calendar C2; stole credentials, drained 49 wallets.

Google’s Threat Intelligence Group has linked North Korean hackers to EtherHiding, blockchain malware previously used by ...

Sonatype, a provider of AI-centric DevSecOps, this week released the Open Source Malware Index, Q3 2025, which analyzed ...

At the upcoming Lived! 360 Orlando 2025 conference, Tim Purdum, Engineering Manager and Senior Software Engineer at dymaptic, ...