Attackers exploited a compromised Ribon application key to access customer names, emails, and addresses from several BigCommerce-hosted online stores.
A supply chain attack targeting the TanStack npm package enabled threat actors to steal approximately 170 private GitHub repositories from security firm CrowdSec.
A sophisticated supply chain attack involving the malicious 'indexed-btree' NPM package has reached millions of downloads by mimicking a legitimate utility.
A malicious npm package mimicking a legitimate utility has been found hiding its malware loader in runtime code to bypass new npm security controls.
An attacker hijacked an active AI coding assistant session to deploy the Shai-Hulud worm, infecting approximately 100 internal repositories at a SaaS provider.
