Attackers used 11 Go and 2 npm packages to spread malware across platforms, putting open-source developers at risk.

In what's the latest instance of a software supply chain attack, unknown threat actors managed to compromise Toptal's GitHub ...

Hackers compromised Toptal's GitHub organization account and used their access to publish ten malicious packages on the Node ...

It has been a busy week for supply-chain attacks targeting open source software available in public repositories, with ...

A larger BigQuery analysis of even more GitHub code (way beyond just C#, to the tune of 1 billion files) also showed a developer preference for spaces. Json.NET is the clear winner in the most-popular ...

Three malicious packages hosted in the Python Package Index (PyPI) code repository have been uncovered, which collectively have more than 12,000 downloads – and presumably slithered into ...