All posts tagged "open source security"
-
Security
/ 4 days agoNorth Korean Hackers Flood Open-Source Repositories with Malware
A persistent North Korean cyber-espionage campaign has significantly expanded its reach by publishing approximately 1,700 malicious software packages across major open-source...
-
Security
/ 1 week agoNorth Korean Hackers Target Axios Maintainer in npm Attack
The maintainer of the widely used Axios JavaScript library has confirmed a recent supply chain attack was the result of a...
-
Security
/ 2 weeks agoGoogle Links Axios npm Attack to North Korean Hackers
Google has formally attributed a recent software supply chain attack to a North Korean state-sponsored hacking group. The attack targeted the...
-
Artificial Intelligence
/ 2 weeks agoAI Startup Mercor Hit by Cyberattack via Compromised Open-Source Tool
AI recruiting startup Mercor has confirmed a security incident after a cybercriminal group claimed responsibility for stealing data from the company’s...
-
Security
/ 2 weeks agoAxios npm Package Compromised in Supply Chain Attack
Two versions of the widely used Axios HTTP client library were found to contain malicious code this week, following a compromise...
-
Security
/ 3 weeks agoSupply Chain Attack Spreads Worm Through npm Packages
A significant software supply chain attack has compromised dozens of popular npm packages, deploying a self-propagating worm. Security researchers report that...
-
Security
/ 3 weeks agoTrivy GitHub Actions Compromised, Secrets Stolen in Supply Chain Attack
The GitHub Actions for Trivy, a widely used open-source security scanner, were compromised for the second time in a month, leading...

