A self-spreading package published on npm spams the registry by spawning new packages every every seven seconds, creating ...
The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...
Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities ...
A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback