Recently, npm, the essential package manager used by developers worldwide, suffered a massive supply chain attack. This ...

Urgent Chrome update: An emergency Chrome patch was issued on June 9, 2026 to address CVE-2026-11645 in the V8 JavaScript ...

The web version of the VS Code editor on GitHub.dev had a security vulnerability that allowed attackers to take over all of a ...

With npm v12, GitHub closes a central attack vector: installation scripts from dependencies will only run after explicit ...

Jake Peterson is Lifehacker’s Tech Editor, and has been covering tech news and how-tos for nearly a decade. His team covers all things technology, including AI, smartphones, computers, game consoles, ...

An overview of the activities of selected APT groups investigated and analyzed by ESET Research in Q4 2025 and Q1 2026 ...

During this year’s World Cup, three outcomes are guaranteed. First, fans of one country will experience nirvana, while those ...

The acquisition will unify VoidZero’s high-performance tooling — including the Vite build tool, Vitest test runner, Rust-based Rolldown bundler and Oxc toolchain — natively into the Cloudflare ...

Microsoft Threat Intelligence identified a large-scale npm supply chain attack affecting 32 maliciously modified packages across more than 90 versions under the @redhat-cloud-services npm scope. The ...

Microsoft has identified an active supply chain attack targeting the npm package ecosystem. On May 28, 2026, a single threat actor operating under the newly created maintainer alias vpmdhaj (a39155771 ...

The United Nations say that a violent crackdown on a protest in western Afghanistan has left at least one person dead.

Fake Claude Code install sites are pushing malware that steals API keys, developer credentials, crypto wallets, and other ...