From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...
Mastra AI’s 144 JavaScript packages was executed in just 88 minutes by North Korea’s Sapphire Sleet hacking group, which ...
A malicious npm package has been caught impersonating one of the JavaScript ecosystem's most widely used build tools. The ...
The new “agentjacking” attack takes almost no real hacking ability to pull off. It's predicated on pulling a public ...
Microsoft says North Korean-linked BlueNoroff compromised a Mastra npm maintainer account and published more than 140 ...
The popular Mastra AI framework, used to build artificial intelligence agents, workflows and retrieval-augmented generation ...
It features a stern, older Italian woman unimpressed by her gay neighbors and their small rainbow flag. She describes it as ...
OpenAI has deployed GPT-5.5-Cyber to execute automated open-source vulnerability remediation alongside security firm Trail of ...
Secure document editing in your own app. ONLYOFFICE Docs Developer equips web applications with secure, latency-free document ...
Today is Microsoft's June 2026 Patch Tuesday, with security updates for 200 flaws, including five publicly disclosed zero-day ...
Proofpoint says UNK_DeadDrop sent 250+ phishing emails to nearly 100 firms, using GitHub and VS Code lures to steal ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results