Malicious KICS Docker tags and VS Code versions 1.17.0, 1.19.0 enabled data exfiltration, risking exposed infrastructure ...
Hackers have compromised Docker images, VSCode and Open VSX extensions for the Checkmarx KICS analysis tool to harvest ...
Attackers published a malicious command-line version of the popular open-source password manager to the npm registry and may ...
A malicious version of the Bitwarden command-line interface (CLI) password manager was briefly distributed via the Node ...
Three supply chain attacks hit npm, PyPI, and Docker Hub between April 21–23, 2026. All three targeted secrets: API keys, cloud credentials, SSH keys, and tokens from developer environments and CI/CD ...
Amid the ongoing GPU shortage, Ocean Network is looking to connect the world’s idle computing power with those who need it.
Aikido Security today launched Aikido Endpoint, a lightweight security agent that protects developer devices against software ...
Microsoft officially announced TypeScript 7.0 Beta on April 21, 2026. The company says TypeScript 7.0 is often 10 times faster than 6.0. The beta ships through @typescript/native-preview@beta and tsgo ...
Microsoft has embedded GitHub Copilot as a default VS Code extension in version 1.116, adding agent debug logging, terminal ...
A malicious version of Bitwarden's CLI password manager was briefly distributed via npm after attackers exploited a compromised GitHub Action, in a campaign linked to the Checkmarx supply chain attack ...
Checkmarx suffers a second supply chain attack in a month, resulting in hackers injecting credential-stealing malware into ...
Aikido Security is launching Aikido Endpoint, a lightweight agent designed to protect developers’ endpoints against supply ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results