Most engineering teams today say they’ve adopted AI coding tools like Cursor, GitHub Copilot and Claude Code. The tools are ...

GlassWorm malware uses a Zig-based dropper to infect developer tools, stealing data and spreading across IDEs.

GlassWorm uses a fake WakaTime VS Code extension to infect IDEs, deploy RATs, and steal data, prompting urgent credential ...

Clash Royale is a PvP strategy game where you go head-to-head against other players, using cards to deploy units to attack your enemies’ base while defending your own. Below, you’ll find a list of all ...

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB JavaScript source map intended only for internal ...

Anthropic's Claude Code source has leaked via a packaging error, exposing anti-distillation traps, an undercover mode, and ...

Our team of savvy editors independently handpicks all recommendations. If you make a purchase through our links, we may earn a commission. Deals and coupons were accurate at the time of publication ...

The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions of the widely used JavaScript HTTP client library.