Open source malware surged 73% in 2025, with npm as a key target with rising risks in software supply chains and developer environments.
Experts say the VoidLink Linux malware was largely built using AI, reaching 88,000 lines of code in days and highlighting ...
Experts reveal Evelyn Stealer malware abusing VS Code extensions to steal developer credentials, browser data, and ...
A single developer built a Linux malware framework in less than a week using artificial intelligence, said security ...
Researchers say VoidLink, malware almost completely developed by AI, raising alarms as threat actors harness generative ...
Hackers have infiltrated a tool your software development teams may be using to write code. Not a comfortable place to be. There’s only one problem. How did your generative AI chatbot team-members ...
A report from ReversingLabs reveals a massive 73% increase in malicious open-source packages in 2025, with over 10,000 ...
A new NuGet typosquatting campaign pushes malicious packages that abuse Visual Studio's MSBuild integration to execute code and install malware stealthily. NuGet is an open-source package manager and ...
North Korea is doubling down on a familiar playbook by weaponizing trust in open-source software and developer workflows. The ...
The malicious activity is targeting organizations with software development teams that rely on VS Code and third-party ...
This was not a single company breach, the credentials were harvested from millions of infected user devices using infostealer malware. Binance appeared in the dataset ...