The popular game engine GameMaker continues advancing, with a new GMRT runtime that will give developers source access and ...

A threat group planted a malicious npm package in a crypto trading project through an AI-generated commit by Anthropic's ...

Team wins praise for adding 'disable all AI features' setting for devs who want a code editor to be only a code editor ...

Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...

A new report from ReversingLabs identified a new tactic by North Korean hackers: feeding malicious code to the AI systems ...

Cross-platform game engine GameMaker has unveiled a major update centred on the launch of its new GameMaker Runtime (GMRT).

Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

OpenAI is mandating macOS users update ChatGPT Desktop and other apps by May 8, 2026, due to a compromised JavaScript library ...

Socket’s acquisition of Secure Annex extends software supply-chain security beyond open-source dependencies into browser and ...

Several npm packages for SAP's cloud application development ecosystem have been compromised as TeamPCP's supply chain ...