Mastra npm packages added easy-day-js malware, exposing developer systems and CI runners to infostealer risks.
July 2026, blocking install scripts, Git dependencies, and remote URL sources by default. Every team running npm install in ...
A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...
Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, ...
Tampered JavaScript in three Awesome Motive plugins exposed WordPress sites to rogue admin accounts and hidden backdoors.
Socket researchers linked 152 Chrome wallpaper extensions to hidden data logging, fake Google search traffic, and ad ...
With the proper setup and guidance, you can have Claude Code, Codex, Posit Assistant, and other coding agents writing R code ...
Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud ...
Fake Claude Code install sites are pushing malware that steals API keys, developer credentials, crypto wallets, and other sensitive data.
The Fayette County Health Department has partnered with Mountains of Hope to install sunscreen dispensers at several ...
The oceanside property cut its monthly electric bill from $7,500 to $1,350 after installing the solar roof in 2024.