The threat actor seeding the Open VSX code marketplace with fraudulent extensions that download the GlassWorm malware has ...

Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...

Earn these JavaScript certs to demonstrate mastery of the most in-demand skills for the world’s most-used programming ...

GlassWorm, a known malware, has put 73 harmful extensions into OpenVSX's registry. Hackers use it to steal developers' crypto ...

VS Code extensions since Dec 21, 2025 fuel GlassWorm v2, installing cross-IDE malware and stealing credentials.

The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

TypeScript 7 Beta is here, bringing native execution speed and shared-memory parallelism to Visual Studio. Experience a 10x speed boost and snappier IntelliSense today.

Researchers say the campaign targeted developer credentials and cloud secrets while abusing trusted publishing and AI coding ...

Home » Security Bloggers Network » Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude Code to Compromise the CAP Framework The post Shai-Hulud Strikes SAP: Supply Chain Worm Weaponized Claude ...

Four SAP NPM packages compromised in the Mini Shai-Hulud supply chain attack trigger a Bun runtime to install an information ...

A threat group planted a malicious npm package in a crypto trading project through an AI-generated commit by Anthropic's ...

A new wave of the Glassworm campaign is targeting the OpenVSX ecosystem with 73 "sleeper" extensions that turn malicious ...