Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

In a supply chain attack, attackers have injected malware into NPM packages with over 2.6 billion weekly downloads after ...

A new cyberattack has put millions of crypto users on alert after hackers slipped malicious code into NPM, the software ...

IntroductionAPT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima) is a North Korean-aligned threat actor active since at least 2012. APT37 primarily targets South Korean individuals ...