A hacker inserted malware in Axios, an open-source web tool downloaded tens of millions of times weekly, in a widespread hack.

Anthropic’s leak of proprietary Claude Code sparked the developer community to group around “claw-code,” the fastest-growing repository on GitHub.

While Cisco breaches often center around hardware and legacy vulnerabilities, a 2024 attack saw an actor download certain files from a developer-facing environment belonging to Cisco. Source code, API tokens, certificates, and internal documents were swiped in the breach, affecting a limited set of CX Professional Services.

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

A growing body of academic research warns that AI-assisted “vibe coding,” where language models assemble software from open-source components with minimal human oversight, is creating hidden costs for the projects it depends on.