Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component ...

Recently, security researchers Socket found 10 packages on npm targeting software developers, specifically those who use the ...

Ten typosquatted npm packages (Jul 4, 2025) delivered a 24MB PyInstaller info stealer using 4 obfuscation layers; ~9,900 ...

The typosquatted packages auto-execute on installation, fingerprint victims by IP, and deploy a PyInstaller binary to harvest ...

An advanced malware campaign on the npm registry steals the very keys that control enterprise cloud infrastructure.

The North Korean threat actor linked to the Contagious Interview campaign has been observed merging some of the functionality ...

setup-node defaults to the Node version that comes installed on the host. On Linux runners, this is installed with sudo, making it impossible to update NPM (as well ...

Google identifies that the North Korean hackers have employed a new technique called ‘EtherHiding’ to install malicious code and steal crypto.

An active campaign named 'PhantomRaven' is targeting developers with dozens of malicious npm packages that steal authentication tokens, CI/CD secrets, and GitHub credentials.

Looking for a general, all-purpose Linux OS? These are user-friendly, secure, and suitable for both new and experienced users.

Researchers outline how the PhantomRaven campaign exploits hole in npm to enable software supply chain attacks.

Xfce is a unique desktop environment that offers serious flexibility and speed. Asmi Linux takes advantage of that to create a Linux distribution that, in theory, should work for anyone.