The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...

GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...

"Under New Management" keeps an eye on the Chrome Web Store, looking for new developer names that show up when extensions are sold off.

Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python repositories.

The infamous GlassWorm malware has infected dozens more Open VSX software packages, according to new research.

Trivy attack force-pushed 75 tags via GitHub Actions, exposing CI/CD secrets, enabling data theft and persistence across developer systems.

Hackers have compromised virtually all versions of Aqua Security’s widely used Trivy vulnerability scanner in an ongoing ...

Under New Management alerts you when your other browser extensions come under control of new owners, highlighting potential scam risks.

GitHub is a vast labyrinth of amazing open-source software projects, and it can be hard to see some of the awesomeness within ...

With Google's recent flagging of the popular Save as Image Type Chrome extension, now is a good time to take stock of all ...

BloodHound Enterprise platform to cover Okta Inc., GitHub and Mac environments and introduced new OpenGraph extensions to map ...

An extension I used almost every day was bought by a new owner and loaded up with spyware. It happened in 2024, but Google ...