The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.
Proof-of-concept exploit code has been published for a critical remote code execution flaw in protobuf.js, a widely used ...
Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...
CVE-2026-5752 CVSS 9.3 flaw in Terrarium enables root code execution via Pyodide prototype traversal, risking container ...
The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of spreading to other projects.
GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.
GHENT, Belgium, April 20, 2026 (GLOBE NEWSWIRE) -- Aikido Security today launched Aikido Endpoint, a lightweight security agent that protects developer devices against software supply chain attacks by ...
A ClickFix campaign targeting macOS users delivers an AppleScript-based infostealer that collects credentials and live ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results