Cybersecurity researchers have discovered a malicious npm package named "@acitons/artifact" that typosquats the legitimate " ...
Developers will have to contend with a dormant turned active malicious code on Visual Studio Code (VS Code) extensions, which ...
GlassWorm, a self-propagating VS Code malware first found in the Open VSX marketplace, continues to infect developer devices ...
Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities ...
The security research team at JFrog, a provider of a platform for building and deploying software, have discovered a critical vulnerability in a node ...
Israeli security researchers identified a malicious spyware campaign in the NPM ecosystem that remained hidden from most ...
Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages.