The text and code editing tool EmEditor was targeted in a supply chain attack that resulted in the distribution of infostealer malware.

A recent supply chain malware attack affected popular NPM packages, potentially reaching millions of downloads in just a few ...

Malicious npm packages posing as n8n community nodes were used to steal OAuth tokens by abusing trusted workflow integrations ...

Shai Hulud is a malware campaign first observed in September targeting the JavaScript ecosystem that focuses on supply chain compromise rather than traditional endpoint infection, using trojanized ...

IBM’s experimental coding assistant “Bob” was pitched as a way to automate routine development tasks, but security ...

A newly discovered third variant of the Shai Hulud malware is raising fresh concerns about the security of the open-source software supply chain, as researchers warn that the latest version shows more ...

ESET researchers have discovered that the updating mechanism of NoxPlayer, an Android emulator for Windows and macOS, made by Hong Kong-based company BigNox, was compromised by an unknown threat actor ...

Researchers at Check Point found and remediated malware on 38 Android devices that were infected somewhere along the supply chain. Mobile devices manufactured by a diverse set of handset makers were ...