A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...

Microsoft has identified an active supply chain attack targeting the npm package ecosystem. On May 28, 2026, a single threat actor operating under the newly created maintainer alias vpmdhaj (a39155771 ...

Supply chain attacks with a Dune sci-fi saga branding continue to spread across the open-source ecosystem, with a Microsoft ...

Congress’s largest conservative caucus, the Republican Study Committee (RSC), unveiled the framework for what its leaders hope will be the starting point for the second reconciliation bill to pass the ...

The Game Package Manager, launched April 28, 2026, replaces the long-standing 'Packages' module in Microsoft Partner Center. It consolidates uploading, bug fixing, update approvals, and live ...

Xbox has announced it is rolling out a new Game Package Manager for all Xbox developers currently configuring or adding new products to publish to Xbox. This replaces the current Microsoft Partner ...

Use left and right arrow keys to seek audio. Following NVIDIA's announcement of the GeForce RTX 5070 12GB laptop GPU, Framework is adding it as a new Graphics Module for the Laptop 16. However, ...

Senate Republicans released the text of a budget resolution to fully fund two controversial immigration enforcement agencies at the heart of the ongoing Department of Homeland Security shutdown. The ...

The ongoing RAM crisis and global supply chain woes have meant the PC industry is taking it from all sides. Framework, the maker of ultra-customizable and repairable laptops, has come out and said ...

Microsoft says Agent Framework 1.0 is the production-ready release, with stable APIs and long-term support for both .NET and Python. The framework is presented as a unified successor path that builds ...

Attackers stole a long-lived npm access token belonging to the lead maintainer of axios, the most popular HTTP client library in JavaScript, and used it to publish two poisoned versions that install a ...

The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package on PyPI and claiming to have stolen data from hundreds of thousands of ...