GitHub Action tj-actions/changed-files was compromised, leaking CI/CD secrets. Users must update immediately to prevent ...
Open source software used by more than 23,000 organizations, some of them in large enterprises, was compromised with credential-stealing code after attackers gained unauthorized access to a maintainer ...
North Korea's Lazarus Group targeted Solana and Exodus wallets by infecting hundreds of software developers via malicious npm ...
Researchers uncovered 20 malicious PyPI packages stealing cloud credentials, downloaded 14,100+ times before removal.
StepSecurity disclosed a compromise of the popular GitHub Action tj-actions/changed-files, which works to detect file changes ...
The Temporal API fixes JavaScripts date and time issues. It offers consistency, precision and time zone support. Soon to be ...
The partnership is a testament to Gradle and Android’s shared commitment to equipping developers with tools to improve the developer experience. According to industry market research firm Evans Data, ...
A supply chain attack on a GitHub Actions tool has put up to 23,000 organisations at risk of having credentials stolen.
The North Korean Lazarus Group, which recently stole $1.5 billion from the crypto exchange Bybit, is targeting developers via npm, a library and registry of JavaScript.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback