Open source software with more than 1 million monthly downloads was compromised after a threat actor exploited a ...

As supply-chain attacks against widely-used, open-source software repositories continue, experts are urging developers to not ...

The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

Last May, Jacob Shaul logged onto his computer and began remotely teaching more than 170 students in Bolivia the basics of ...

Artificial intelligence tools are making it faster than ever to reproduce creative work. Does copyright even matter anymore?

CVE-2026-5752 CVSS 9.3 flaw in Terrarium enables root code execution via Pyodide prototype traversal, risking container ...

If you understand how things work,” she says, “you can do things with that knowledge.” But she’s in this to solve an ...

GHENT, Belgium, April 20, 2026 (GLOBE NEWSWIRE) -- Aikido Security today launched Aikido Endpoint, a lightweight security agent that protects developer devices against software supply chain attacks by ...

Vibe coding platforms are powerful, but users often don't know what they created.

Expo, the developer of a popular open-source tool for building cross-platform applications, today announced that it has ...

I finally quit using Google Chrome as my default web browser in favor of an open source alternative, and I’m not looking back ...

Sonatype®, the leader in AI-driven DevSecOps, today unveiled the Q1 2026 Open Source Malware Index, identifying 21,764 malicious open source packages in the first quarter of the year and bringing the ...