Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...

Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.

SAP npm packages poisoned on April 29, 2026 + AES-256-GCM encrypted credential theft + AI coding tools abused for spread.

Researchers uncover a malicious npm dependency linked to an AI‑assisted code commit that steals sensitive data and exposes ...

A single third-party OAuth integration can become a direct path into your environment. Push explains how the Vercel breach ...

Thirty ClawHub skills published by a single author are silently co-opting AI agents and creating a mass cryptocurrency mining ...

Anthropic is investigating after a small group of Discord users reportedly gained unauthorized access to its restricted Mythos AI model via a third-party vendor environment. Mythos, designed for ...

FORCE LEADERSHIP ORDERS DISMISSAL, PROSECUTION OF OFFICERS INVOLVED IN EFFURUN SHOOTING The Nigeria Police Force hereby ...

Checkmarx has confirmed that hackers stole data from its GitHub environment one week after hacking it to publish malicious ...

AI coding agents are now indispensable. Claude Code, Codex, and Hermes write code, call APIs, run commands, and automate workflows at extraordinary speed. But to do their jobs, they need credentials ...

It has been a bad six weeks for security firm Checkmarx. Over the past 40 days, it has been the victim of at least one supply ...