A malicious npm package has been caught impersonating one of the JavaScript ecosystem's most widely used build tools. The ...

On June 24, 2026, Microsoft’s Digital Crimes Unit (DCU) facilitated the takedown, suspension, and blocking of domains that ...

Our tracking of OceanLotus activities from 2024–2026 reveals a shift in operational focus. During this period, the Vietnam-aligned OceanLotus adopted a more selective approach to external operations ...

JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram ...

Multiple weaponized proof-of-concept (PoC) exploits on GitHub delivered a Python-based remote access trojan (RAT) called ChocoPoC that can execute commands and steal sensitive data. However, ChocoPoC ...

Secure software supply chain solution provider Chainguard Inc. today expanded its Chainguard Repository product with malware ...

ThreatsDay Bulletin covers AI abuse, poisoned packages, phishing, macOS attacks, SD-WAN flaws, scams, and supply-chain ...

Essential Ways to Run a Python Script Python is one of the most popular programming languages today, widely praised for its simplicity and versatility. Whether you’re a beginner dipping your toes into ...

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...