Latest update to Microsoft’s code editor improves dictation, introduces side chats, and adds support for comments to provide ...

FortiGuard exposes year-long QuickFox VPN supply chain attack deploying FDMTP implant on corporate Windows machines only.

A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

Five free Marketplace extensions promise private, locally run coding assistance as developers look for alternatives to metered cloud AI.

A self-propagating malware campaign has compromised more than 430 npm packages, exposing software projects linked to dependencies that collectively record about two billion installations each month.

More than 400 NPM packages have been infected with the Mini Shai-Hulud worm in the ChainDrop supply chain attack.

A Mini Shai-Hulud worm spread through more than 400 npm packages, stealing npm, GitHub, cloud, and CI/CD credentials.

Malware infected at least 444 npm packages spanning 2,000 versions, threatening software with over two billion monthly installs. Attackers compromised maintainer Jared Wray's account, then used stolen ...

A trojanized QuickFox Windows installer delivered FDMTP in a supply chain attack active since at least August 2025, after ...

JavaScript向けパッケージ管理サービス「npm」で、広く使われている数百個のパッケージに認証情報を盗むマルウェアが混入される大規模なサプライチェーン攻撃が発生しました。セキュリティ企業のAikido ...

Open VSX removes 77 evil twin extensions that impersonate developer tools and exfiltrate host, workspace, Git, and CI data.

針對近日NPM套件keyv供應鏈攻擊事故ChainDrop，微軟威脅情報團隊透露其蠕蟲程式的運作方式，會根據受害電腦是開發工作站或CI/CD系統，採取不同的活動 擔心錯過重要的資安新聞嗎？資安日報與資安週報即日起推出免費電子報訂閱，每天每週直送資安要聞，提供專業、易懂、便於轉述的最佳中文資安情報，助你掌握全球與臺灣最新資安脈動。