A version of the AI coding tool in Anthropic's npm registry included a source map file, which leads to the full proprietary ...

A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...

Google has unveiled Gemma 4, its most capable open-source AI model family, designed for broad accessibility from data centers ...

Analysis Shows Production-Deployable Rego Policies Would Have Prevented CMS Data Exposure, 500K-Line Source Code Leak, ...

The NPM package for Axios, a popular JavaScript HTTP client library, was briefly compromised this week, possibly by North ...

The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...

Google Chrome and other Chromium-based browsers, including Edge and Vivaldi, could soon get native support for video and ...

After details of a yet-to-be-announced model were revealed due to the company leaving unpublished drafts of documents and ...

Google has issued an emergency security update for the Chrome browser to address a critical zero-day vulnerability that is currently being ...

The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...

The open-source database RxDB 17 now synchronizes data directly via Google Drive or OneDrive – developers no longer need ...

A compromise of the widely used Axios software package has triggered fresh concern over open-source security after attackers used a hijacked maintainer account to publish poisoned versions carrying ...