Hackers injected credential-stealing malware into the Bitwarden CLI tool via a supply chain attack on the NPM package, ...

The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

GitHub used as C2, new Cloudflare exfiltration domain found, linked to April 22 Checkmarx KICS compromise via Dependabot.

The Bitwarden CLI was briefly compromised after attackers uploaded a malicious @bitwarden/cli package to npm containing a credential-stealing payload capable of spreading to other projects.

With a bonus script that puts any search tool to shame.

ESET Research has discovered a new China-aligned APT group that we’ve named GopherWhisper, which targets Mongolian ...

IntroductionOn March 12, 2026, Zscaler ThreatLabz discovered a malicious ZIP archive containing military-themed document lures targeting Chinese-speaking individuals. Our analysis of this sample ...

The primary Android development environment remains Android Studio, which has built-in support for AI agents, but the new CLI ...

Anthropic's Claude has approved malicious code in a spoofed Git identity test, showing how weak GitHub Actions trust rules ...

What makes Codex useful for building websites is that it can install software packages, run a local preview server, track ...

As AI Agents Write More of the Code, GitKraken Gives Every Developer the Tools to Stay in CommandSCOTTSDALE, Ariz., ...

Google unveils a revitalized Android CLI and "Skills" repository to help AI agents develop mobile apps faster and with 70% ...