IntroductionOn May 14, 2026, the Zscaler ThreatLabz team identified unusually high activity associated with the threat actor SmartApeSG to deploy malware. During our examination, we discovered ...

A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...

The popular Mastra AI framework, used to build artificial intelligence agents, workflows and retrieval-augmented generation ...

Mastra npm packages added easy-day-js malware, exposing developer systems and CI runners to infostealer risks.

Diana Ross missing the target with her penalty. The goal breaking in half anyway. The nice red trouser suit Ross was wearing. Truly, the World Cup opening ceremony is the event that happens before the ...

Proofpoint says UNK_DeadDrop sent 250+ phishing emails to nearly 100 firms, using GitHub and VS Code lures to steal credentials and wallet data.

Red Hat hit by npm supply‑chain attack - here's how to stay safe ...

It’s been three-and-a-half years since generative AI exploded onto the scene. In this past year, progress has continued its relentless pace: Vibe coding took off, companies embraced agentic workflows, ...