The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...

After details of a yet-to-be-announced model were revealed due to the company leaving unpublished drafts of documents and ...

Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be ...

The phishing campaign lures OpenClaw developers with fake $5,000 token airdrops, then drains wallets through a cloned site ...

OX Security exposes a GitHub phishing campaign targeting OpenClaw developers with fake $CLAW airdrops and a cloned site built ...

It is exactly this backdoor that had Google conclude this was a North Korea-sponsored campaign. GTIG said WAVESHAPER.V2 is an ...

The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...

A widely used JavaScript package used with hundreds of millions of downloads has been compromised in a new supply chain ...

Crypto scammers are exploiting the rising visibility of OpenClaw to target developers through a coordinated phishing campaign ...

With almost 175,000 npm projects listing the library as a dependency, the attack had a huge cascade effect and shows how ...