Axios 1.14.1 and 0.30.4 injected malicious [email protected] after npm compromise on March 31, 2026, deploying ...
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
LangChain and LangGraph have patched three high-severity and critical bugs.
Supply chain attacks feel like they're becoming more and more common.
A cyber attack hit LiteLLM, an open-source library used in many AI systems, carrying malicious code that stole credentials ...
Infosecurity outlines key recommendations for CISOs and security teams to implement safeguards for AI-assisted coding ...