Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub repositories to deliver Vidar ...
A new malware family named 'AgingFly' has been identified in attacks against local governments and hospitals that steal ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a cross-platform RAT. Axios sits in 80% of cloud environments. Huntress confirmed ...
The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...
IntroductionOn March 31, 2026, Anthropic accidentally exposed the full source code of Claude Code (its flagship terminal-based AI coding agent) through a 59.8 MB JavaScript source map (.map) file ...
Threat actors have been observed weaponizing n8n, a popular artificial intelligence (AI) workflow automation platform, to ...
The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...
What makes this attack so unsettling is that all the hackers had to do was just steal the password of one of the axios ...
Hiding in imposter sites, GitHub downloads, and YouTube links, this infostealer is designed to hijack accounts and drain ...
Anthropic accidentally leaked key details of its AI tool Claude Code.
For those who recall the debate surrounding Microsoft Recall not long ago, Claude Code's capture of activity is similar. Every read tool call, every Bash tool call, every search (grep) result, and ...