CVE-2026-44009 (CVSS score: 9.8) - A vulnerability that allows sandbox escape via a null proto exception and permits an ...

A critical vulnerability in the popular Node.js sandboxing library vm2 allows escaping the sandbox and executing arbitrary ...

Four npm packages linked to SAP's Cloud Application Programming Model were hijacked. The hackers added code that steals ...

Bun creator Jarred Sumner has posted a Zig-to-Rust porting guide, igniting speculation that the project may migrate away from ...

In the first five months of 2026, security researchers have flagged more malicious packages on the npm registry than in all ...

Cybersecurity firm Trellix disclosed a data breach after attackers gained access to "a portion" of its source code repository ...

May 2, 2026: We looked for new Japanese Supermarket Simulator codes to add to our list, the latest of which offers half an hour of bonus customer capacity. We also checked our active codes and brought ...

Malicious Lightning 2.6.2/2.6.3 released April 30 enable credential theft via hidden payload, leading to PyPI quarantine and ...

Publicly released exploit code for an effectively unpatched vulnerability that gives root access to virtually all releases of ...

According to Kaspersky telemetry, almost 19,500 malicious packages were found in open-source projects by the end of 2025, representing a 37% increase compared to the end of 2024.Modern software ...

A new report from ReversingLabs identified a new tactic by North Korean hackers: feeding malicious code to the AI systems ...

Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...