The compromised packages, linked to the Trivy breach, executed a three‑stage payload targeting AWS, GCP, Azure, Kubernetes ...

The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$.

The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package ...

OpenAI announced Thursday that it has entered into an agreement to acquire Astral, the company behind popular open source Python development tools such as uv, Ruff, and ty, and integrate the company ...

Cybersecurity researchers have uncovered a new set of malicious npm packages that are designed to steal cryptocurrency ...

A new malicious npm campaign using fake installation logs to hide malware activity has been identified by security ...

Jan. 19, 2026 Cannabis-based medicines have been widely promoted as a potential answer for people living with chronic nerve pain—but a major new review finds the evidence just isn’t there yet. After ...