An active campaign named 'PhantomRaven' is targeting developers with dozens of malicious npm packages that steal authentication tokens, CI/CD secrets, and GitHub credentials.

Recently, security researchers Socket found 10 packages on npm targeting software developers, specifically those who use the ...

EtherHiding’: Nation-state and cybercriminal groups are leveraging smart contracts as command-and-control servers for ...

The North Korean threat actor linked to the Contagious Interview campaign has been observed merging some of the functionality ...

North Korean threat group Famous Chollima is using blockchain technology to hide malware payloads in smart contracts, which ...

Today, at the JSConf North America 2025, Harper announced it will open source its core technology, a composable full-stack web application platform. The highly extensible, distributed system fuses ...

India’s cybersecurity agency warns of a fast-spreading npm supply chain worm, urging startups and ITes firms to secure credentials and audit dependencies.

The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach reports, expert analysis, and actionable insights for infosec professionals and ...