Cybersecurity researchers have uncovered critical remote code execution vulnerabilities impacting major artificial ...

A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be ...

What if AI-assisted development is less of a threat, and more of a jetpack? This month’s report tackles vibe coding, along ...

The coordinated campaign has so far published as many as 46,484 packages, according to SourceCodeRED security researcher Paul ...

The Fresh framework, built on Deno, is redefining how developers create fast, secure, and lightweight web applications.

A new proof-of-concept attack shows that malicious Model Context Protocol servers can inject JavaScript into Cursor’s browser ...

网络安全公司 Knostic.ai 研究人员在提交给 CSO 的报告中指出："我们演示了单个恶意 MCP 服务器如何将 Cursor 内部浏览器中的登录页面替换为攻击者控制的钓鱼页面，窃取凭证并发送至远程攻击者。该技术还能完全攻陷受害者工作站。" ...

Recently, security researchers Socket found 10 packages on npm targeting software developers, specifically those who use the ...