Sophisticated cyberattacks targeting a variety of open source projects, including the Trivy security-scanner project, the widely used Axios Javascript package, and now Anthropic's accidental ...

Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar information-stealing malware. Claude Code is a terminal-based AI agent from ...

Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...

The popular game engine GameMaker continues advancing, with a new GMRT runtime that will give developers source access and ...

A 10/10 Flowise bug was patched, but is now being abused in the wild.

Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

A missed step in a manual deployment process exposed the internal workings of one of AI's hottest coding tools—and briefly handed the rest of the industry a detailed map of how Anthropic builds it.

Fake packages aim to steal data, credentials, and secrets, and to infect every package created using them, in what could be ...

I wish I had switched to this open source browser sooner ...

Oops. A 60MB source map file just leaked Anthropic's entire roadmap.

Last May, Jacob Shaul logged onto his computer and began remotely teaching more than 170 students in Bolivia the basics of ...