Apache Commons Text is used for processing character strings in Java apps. A critical vulnerability allows the injection of ...

Spring Boot is one of the most popular and accessible web development frameworks in the world. Find out what it’s about, with ...

A new wave of organized crime maneuvers is taking aim at Americans’ holiday shopping purchases – and their wallets. Hackers leveraging malware systems and other cybercriminal tools are infiltrating ...

As 2025 draws to a close, security professionals face a sobering realization: the traditional playbook for web security has become dangerously obsolete. AI-powered attacks, evolving injection ...

The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting hundreds of packages in the NPM (Node Package Manager) registry and publishing stolen data in 30,000 GitHub ...

North Korea's 'Contagious Interview' campaign to target job seekers has expanded yet again, this time with a persistent npm package-poisoning game that runs like a well-oiled machine. Threat actors ...

Cybersecurity researchers have disclosed details of an npm package that attempts to influence artificial intelligence (AI)-driven security scanners. The package in question is eslint-plugin-unicorn-ts ...

The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages added on the two platforms. OpenVSX and ...

A suspicious package found Monday morning outside the Wilkie D. Ferguson Jr. U.S. Courthouse in Downtown Miami prompted a swift response from law enforcement, temporarily disrupting access to nearby ...

A new attempt to influence AI-driven security scanners has been identified in a malicious npm package. The package, eslint-plugin-unicorn-ts-2 version 1.2.1, appeared to be a TypeScript variant of the ...

The new self-replicating worm iteration has destructive capabilities, erasing home directory contents if it cannot spread to more repositories. Approximately 640 NPM packages have been infected with a ...