Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities ...
The leak has now been fixed. According to the Open VSX team, the incident has been fully contained and closed since October ...
A sophisticated phishing campaign has enabled attackers to compromise a maintainer account within the npm ecosystem, triggering one of the largest software-supply-chain breaches recorded. On 8 ...
Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages.
Software supply chain security firm JFrog has disclosed the details of a critical vulnerability affecting a popular React ...