Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component ...

An active campaign named 'PhantomRaven' is targeting developers with dozens of malicious npm packages that steal authentication tokens, CI/CD secrets, and GitHub credentials.

Recently, security researchers Socket found 10 packages on npm targeting software developers, specifically those who use the ...

EtherHiding’: Nation-state and cybercriminal groups are leveraging smart contracts as command-and-control servers for ...

The North Korean threat actor linked to the Contagious Interview campaign has been observed merging some of the functionality ...

North Korean threat group Famous Chollima is using blockchain technology to hide malware payloads in smart contracts, which ...

To play this video you need to enable JavaScript. Whales are majestic creatures. Their sheer size, their ability to swim to great depths and their whale song have captured our imaginations throughout ...

India’s cybersecurity agency warns of a fast-spreading npm supply chain worm, urging startups and ITes firms to secure credentials and audit dependencies.

Many of us like to visit museums to see ancient artefacts in person – it's an exciting way to learn about the history and culture of different civilisations. But did you know that there are criminal ...