Fake OpenAI Privacy Filter hit #1 on Hugging Face with 244,000 downloads, spreading infostealer malware to Windows users.
TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...
TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...
The world’s largest open-source registry, node package manager (npm), has been hit by another fast-moving malware attack, ...
If you are building a simple dashboard or a form-based application, the traditional JSON API (REST or GraphQL) approach is ...
A 6MB editor quietly replacing tools that cost ten times more.
I started this as a side project, but my Windows Command Center suddenly became useful.
Structured data capture in Revvity Signals One turns lab data into searchable, auditable records for real-time analytics and ...
A fake repository mimicking OpenAI’s Privacy Filter on Hugging Face accumulated ~244,000 downloads before being removed. It delivered a multi-stage Rust infostealer ...
A malicious repository on Hugging Face impersonated OpenAI’s “Privacy Filter” project and briefly reached the platform’s top trending position before removal ...
Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and ...
The website for the popular JDownloader download manager was compromised earlier this week to distribute malicious Windows ...