Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...
The world’s largest open-source registry, node package manager (npm), has been hit by another fast-moving malware attack, ...
Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.
On Thursday, Microsoft shared mitigations for a high-severity Exchange Server vulnerability exploited in attacks that allow ...
Popular JavaScript modules including size-sensor and echarts-for-react hit as hijacked account closed GitHub warnings ...
CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...
Technology that helps write computer code is not new, but advances in generative AI (GenAI) and agentic AI have catapulted ...
A Shai-Hulud copycat has turned up in yet another npm package just five days after TeamPCP open sourced the worm and ...
Alabaster Dawn is a fresh top-down 2.5D action RPG from Radical Fish Games, the developers of the excellent CrossCode.
Over 170 TanStack, Mistral AI, OpenSearch, UiPath, and other packages were affected in a new Mini Shai-Hulud supply chain ...
GitHub has introduced a significant update to its CodeQL engine, enabling developers to define custom sanitizers and ...
TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results