After details of a yet-to-be-announced model were revealed due to the company leaving unpublished drafts of documents and ...

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

Anthropic has exposed Claude Code's source code, with a packaging error triggering a rapid chain reaction across GitHub and ...

How AI has suddenly become much more useful to open-source developers ...

The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...

The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...

A hacker inserted malware in Axios, an open-source web tool downloaded tens of millions of times weekly, in a widespread hack ...

According to Socket, the extensions (complete list here) are published under five distinct publisher identities – Yana ...

IntroductionOn March 31, 2026, Anthropic accidentally exposed the full source code of Claude Code (its flagship ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from ...