For more than a year, a self-propagating worm rode VS Code extensions, npm packages, and stolen developer credentials through ...

CrowdStrike, Google and the Shadowserver Foundation have disrupted the Glassworm botnet, a sophisticated malware campaign that infected Github repos, npm packages and VS code extensions to steal ...

CrowdStrike, Google and the Shadowserver Foundation worked together to take down a botnet that poisoned over 300 GitHub ...

GlassWorm poisoned 300 GitHub repositories since 2025, enabling supply chain attacks against developers and organizations.

Microsoft has had a VS Code extension for a long time, and it finally came back to bite them.

Millions of AI agents and tools around the world have been imperiled by a critical vulnerability that can allow hackers to ...

Is it the same this time, or do artificial intelligence (AI) and vibe coding upend the game? More generally, can AI and software engineering enter into a successful marriage? Are we about to witness ...

Hacked code repository GitHub warned administrators of self-hosted git servers to rotate public encryption keys following a ...

The security platform Socket has recently discovered an enormous worldwide malware operation that has been dubbed "TrapDoor".

TeamPCP is an increasingly notorious group of cybercriminals that carry out software supply chain attacks, where hundreds of ...

Appshots lets Codex for Mac understand what’s on your screen without having to feed screenshots or paste code.

A GitHub employee installed a routine VS Code extension update, handed cybercrime group TeamPCP enough access to exfiltrate ...