A group of VS Code theme extensions linked to GlassWorm, a malware campaign targeting developers. Their investigation ...

Recently, I decided to try creating a simple app that runs in a browser for the first time. While considering which tools to use, I discovered that GitHub's "GitHub Pages" feature could make it easy ...

A report published by Google's Threat Intelligence Group (GTIG) on September 9, 2026, details MCP server hijacking and supply ...

Japan, the US, Australia and Germany have disclosed WaterPlum's fake-recruitment attacks. We break down the 30,000-device ...

AI agents helped hackers run a cloud credential theft campaign in under six hours, stealing thousands of third-party credentials.

The North Korean threat actors linked to the Contagious Interview campaign have been observed publishing 108 unique packages and web browser extensions spanning npm, Packagist, Go, and Google Chrome ...

A new wave of supply chain attacks is spreading across the open source world, and this time the target is developers themselves. Security researchers have uncovered a campaign called PolinRider that ...

Glassworm infected developers through poisoned tools and packages until a coordinated takedown killed all four of its C2 channels at once. On May 26, 2026, at 14:00 UTC, CrowdStrike Counter Adversary ...

Version 18.95.0 of the popular Nx Console extension (2.2M+ installs) was published with malicious code targeting developer credentials, cloud infrastructure tokens, and CI/CD secrets.

The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$. The TeamPCP hacking group has expanded its open source software campaign from ...

The North Korean threat actors behind the Contagious Interview campaign, also tracked as WaterPlum, have been attributed to a malware family tracked as StoatWaffle that's distributed via malicious ...

The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, repositories, and extensions on GitHub, npm, and VSCode/OpenVSX extensions. Evidence ...