Web3 founder Akshit Ostwal lost $20K to North Korea's BeaverTail malware in a sophisticated crypto scam targeting developers.

Introducing TanStack AI: a revolutionary, framework-agnostic toolkit empowering developers with unparalleled control over their AI stack. This open-source release features a unified interface across ...

Researchers at Zscaler ThreatLabz have found three malicious Bitcoin npm packages that are meant to implant malware named ...

Celebrate '26 by helping us reach our New Year's goal before Jan. 16: join as an associate member today. You will help the FSF remain strong and independent to empower technology users everywhere.

A critical CVSS 9.2 flaw in AdonisJS bodyparser lets attackers write arbitrary files via path traversal when uploads are ...

ReScript 12.0 has launched, marking a milestone in modernizing the language with a rewritten build system, improved performance, and enhanced syntax. Key features include modular architecture, ...

A new strain of the Shai Hulud worm is discovered by researchers, signaling the self-propagating supply chain threat ...

As a worm spread through hundreds of npm packages in 2025, it didn't exploit a vulnerability – it exploited the architecture.

Researchers uncovered 27 malicious npm packages used over five months to host phishing pages that steal credentials from ...

Shai Hulud is a malware campaign first observed in September targeting the JavaScript ecosystem that focuses on supply chain compromise rather than traditional endpoint infection, using trojanized ...

North Korean hackers continue to poison npm packages with malicious JavaScript libraries targeting developers in the ongoing Contagious Interview campaign. One month after October 10, 2025, the ...