Within days of each other, Anthropic first leaked the source code to Claude Code, and then a critical vulnerability was found ...
The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...
A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...
After details of a yet-to-be-announced model were revealed due to the company leaving unpublished drafts of documents and ...
Anthropic has accidentally exposed Claude Code's full 512,000-line TypeScript source via an npm source map, revealing ...
North Korean hackers exploit VS Code tasks.json auto-run since Dec 2025 to deploy StoatWaffle malware, stealing data and ...
Interlock exploits CVE-2026-20131 zero-day since Jan 26, enabling root access on Cisco FMC, increasing ransomware risks.
Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible ...
ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be ...