TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

In March 2026, someone hijacked a maintainer account for Axios, a JavaScript HTTP library downloaded more than 45 million ...

Thirteen critical vulnerabilities have been found in the vm2 JavaScript sandbox package that could allow an attacker’s code ...

Coinbase Global (COIN) options markets are bracing for a significant post-earnings swing ahead of the crypto exchange's first ...

Chainguard, a $3.5 billion remote-first software company, is opening its first physical office in New York City. But ...

William Liu is grateful that he finished high school when he did. If the latest AI tools had been around then, he told me, he might have been tempted to use them to do his homework. Liu, now a ...

The AppsFlyer Web SDK was temporarily hijacked this week with malicious code used to steal cryptocurrency in a supply-chain attack. The payload can intercept cryptocurrency wallet addresses entered on ...

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. When generative AI tools like ChatGPT first became household names, prompt engineering ...

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...