Fortinet warns Stealit malware uses Node.js SEA and fake installers to deliver stealers, RATs, and persistence.

Researchers monitoring for larger .ICS calendar attachments found that a flaw in Zimbra Collaboration Suite (ZCS) was used in ...

A worm-like campaign named Shai-Hulud has been flagged, targeting widely used packages and propagating itself by harvesting secrets and inserting backdoors. It operates across npm accounts, installing ...

The JavaScript development community faced one of its most sophisticated supply chain attacks in September, when a ...

A new variant of the FileFix social engineering attack uses cache smuggling to secretly download a malicious ZIP archive onto ...