TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...
Fake OpenAI Privacy Filter hit #1 on Hugging Face with 244,000 downloads, spreading infostealer malware to Windows users.
TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...
Researchers demonstrate how attackers can weaponize trusted repositories to hijack AI coding assistants and compromise ...
A HAR file is a JSON archive file format that stores browsing data across multiple browsers. It works by storing a data session between the client and server. In other words, a HAR file is used to ...
A fake repo impersonating the OpenAI Privacy Filter model racked up 244,000 downloads in under 18 hours before Hugging Face ...
A malicious Hugging Face repository that reached the platform's trending list impersonated OpenAI's "Privacy Filter" project ...
The repository reached the #1 trending position on Hugging Face within 18 hours, highlighting how public AI repositories are ...
A North Korean APT has crafted malicious software packages to appeal to AI coding agents, while ‘slopsquatting’ shows the ...
Today's applications require monitoring, logging, configuration, etc. Each of these concerns can be implemented as a ...
Several SAP npm packages were exposed to a supply chain attack. The hacker group TeamPCP is behind it, say security ...
Blackmagic Design has announced a major update to its professional video editing and color correction software, DaVinci Resolve, including a new Photo page that aims to streamline image reframing and ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results