Weeks after being declared eradicated, GlassWorm is again infesting open source extensions using the same invisible Unicode ...

The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...

Developers will have to contend with a dormant turned active malicious code on Visual Studio Code (VS Code) extensions, which ...

Huntress finds three GootLoader infections since Oct 27, 2025; two led to domain controller compromise within 17 hours.

Microsoft has released C# 14 and .NET 10, a long-term support version, along with a bunch of related products including ...

Gootloader JavaScript malware, commonly used to deliver ransomware, is back in action after a period of reduced activity.

The GlassWorm malware campaign, which impacted the OpenVSX and Visual Studio Code marketplaces last month, has returned with ...

Besides its lightweight design and compatibility with all major operating systems, a massive collection of extensions is one ...

The Gootloader malware scam, which was thought to have been disrupted and shut down in March 2025, has returned with both old ...

A widely-adopted JavaScript library has been found carrying a critical vulnerability which could allow threat actors to ...

AI-powered coding opens doors for innovation but also for exploitation, as cyber risks rise with the rise of 'vibe coding' ...

The security research team at JFrog, a provider of a platform for building and deploying software, have discovered a critical vulnerability in a node ...