A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

It is exactly this backdoor that had Google conclude this was a North Korea-sponsored campaign. GTIG said WAVESHAPER.V2 is an ...

North Korean hackers compromised the widely used Axios JavaScript library to infiltrate US companies and steal cryptocurrency ...

Anthropic's Claude Code source has leaked via a packaging error, exposing anti-distillation traps, an undercover mode, and scaffolding for an unreleased agent.

A malware campaign uses WhatsApp messages to deliver VBS scripts that initiate a multi-stage infection chain. The attack ...

What happens when a self-hosted space lobster tries to work in Visual Studio 2026? OpenClaw finds terminal access, project insight, and just enough routing weirdness to send a message to itself ...