Sometime in late May 2026, a poisoned update slipped into the @antv family of JavaScript visualization libraries, the ...
Fake Claude Code install sites are pushing malware that steals API keys, developer credentials, crypto wallets, and other ...
Massive regional C2 footprint More than 1.3K C2 Servers Discovered in the Middle East Hunt.io said it identified more than ...
A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...