Recently, security researchers Socket found 10 packages on npm targeting software developers, specifically those who use the ...

Vulnerability in the popular Rust library Async-tar could allow attackers to smuggle archive entries and execute arbitrary code remotely.