CanisterWorm infects 28 npm packages via ICP-based C2, enabling self-propagation and persistent backdoor access across ...
Ocean Network links idle GPUs with AI workloads through a decentralized compute market and editor-based orchestration tools.
A threat actor who stole credentials from a legitimate node package manager (npm) publisher has spread a persistent, ...
GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...
New Opentrons AI capability lets scientists simulate and visually inspect automated laboratory experiments before robots ...
OpenAI to acquire Astral, bringing Python tools like uv, Ruff, and ty into Codex as it moves from code generation to ...
UTC, Aikido Security detected an unusual pattern across the npm registry: dozens of packages from multiple organizations were ...
Something else to worry about.
The Contagious Interview campaign weaponizes job recruitment to target developers. Threat actors pose as recruiters from crypto and AI companies and deliver backdoors such as OtterCookie and ...
Nvidia unveiled its open-source Agent Toolkit at GTC 2026, adding OpenShell, AI-Q, and major partners including Adobe, SAP, ...
If you suspect you were running a compromised version, treat all pipeline secrets as compromised and rotate immediately,’ ...
Files on a central cloud server used by the ransomware group highlight a systematic, aggressive attack on network backups as ...