Tech Times

North Korea’s Lazarus Group Hid a Full RAT in Six Rollup Polyfill npm Packages

Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...
The Hacker News

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

Cybersecurity researchers have uncovered two hijacked npm packages and a cluster of Go packages that are designed to deploy a Python-based information stealer on compromised Windows, Linux, and macOS ...
The Hacker News

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Codex 和 Claude Code，到底哪个更好？

如果你喜欢“派任务等结果”的模式——把任务交给AI，然后去喝杯咖啡，回来看结果——Codex更适合你。它的云端沙箱和并行执行能力，让“委派式”工作变得高效又安全。 这个问题问得太精准了。 2026年的AI编程工具赛道，Codex和Claude Code就是两个最耀眼的明星。 GitHub上，Claude Code斩获了12.4万Star，Codex也拿下了8.3万Star。 两者都支持终端操作、多 ...