Updated with further information from Bitwarden. The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to…
Browsing: Package
Malicious versions of the highly popular Axios NPM library were distributed to millions in a fresh supply chain attack blamed…
Anthropic says it accidentally leaked the source code for Claude Code, which is closed source, but the company says no…
TeamPCP hackers compromised the Telnyx package on the Python Package Index today, uploading malicious versions that deliver credential-stealing malware hidden…
TeamPCP continues is supply chain compromise rampage, with telnyx on PyPI being the latest maliciously modified package. What happened? Telnyx…
Developers install external libraries with a single command, and that step can introduce more code than expected into a project…
Cybersecurity researchers have discovered a malicious npm package that masquerades as an OpenClaw installer to deploy a remote access trojan…
Ravie LakshmananFeb 03, 2026Open Source / Vulnerability Threat actors have been observed exploiting a critical security flaw impacting the Metro…