JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.

A variant of the infamous Shai-Hulud worm wreaked havoc on Microsoft's code repositories, triggering disruptions to CI/CD workflows and heightening concerns about increasing software supply chain ...

Microsoft has cut off access to dozens of its open source projects hosted on GitHub as it investigates how hackers apparently breached the projects and injected password-stealing malware into the code ...

Dozens of cryptographically verified open source packages from Microsoft were compromised late last week to add advanced credential-stealing code that was triggered when developers opened them in AI ...

Russian communications watchdog Roskomnadzor has revealed plans to build a 'state-run VPN,' which is supposed to help the country's IT sector, currently cut off from foreign services and repositories.

Threat actor reused unrotated GitHub Actions secrets to compromise 73 Microsoft repos Miasma worm planted across Azure, microsoft, Azure‑Samples, and MicrosoftDocs orgs Microsoft pulled affected repos ...