Threat actors are still abusing Visual Studio Code extensions as an entry point, with the latest fake Prettier incident ...

The return of the Shai-Hulud supply chain attack was dubbed 'The Second Coming' shortly after the first warning about it on ...

A spate of supply chain attacks forces GitHub’s npm to revoke ‘classic’ tokens. Despite this, larger worries about developer ...

A stealthy campaign with 19 extensions on the VSCode Marketplace has been active since February, targeting developers with ...

North Korean hackers intensify their efforts against blockchain and Web3 developers, using nearly 200 malicious npm packages ...

The latest ThreatsDay Bulletin breaks down the week’s biggest stories — rootkits evading Windows, Docker leaks, AI risks and ...

Container image scanning has come a long way over the years, but it still comes with its own set of, often unique, challenges ...

Unlock the power of automated GitHub downloads.