Popular code repository GitHub is taking action against hackers targeting popular JavaScript code packages to spread malware.

A newly-discovered malicious package with layers of obfuscation is disguised as a utility library, with malware essentially ...

Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web browser. The package, masquerading as a utility library, leverages this ...

Rico Nasty, Ginger Root, Indigo De Souza, Saul Williams, Tarwa N-Tiniri, and Flock of Dimes are just some of the acts playing ...