Hackers compromised 19 packages on the PyPI, collectively downloaded hundreds of thousands of times, in a new Shai-Hulud ...

A new supply-chain attack has infected 36 packages on the Node Package Manager (npm) index with infostealer malware called IronWorm. The malware targets 86 environment variables (key-value pairs) and ...

Vercel has released Next.js 16.2, featuring performance enhancements that make development startup 400% faster and rendering ...

While UiPath turned in a solid quarter, it issued conservative Q2 guidance, in part due to some currency headwinds. While the ...

Q1 FY2027 earnings call recap: raised guidance, ARR/revenue beats, GAAP profit, AI agents & orchestration momentum, buybacks—read now.

Bumblebee from Perplexity scans developer machines for compromised packages and AI tool configs, without triggering malware.

To continue reading this content, please enable JavaScript in your browser settings and refresh this page. Preview this article 1 min Somasegar spent the past decade ...

On May 11, 2026, a self-replicating worm called Mini Shai-Hulud quietly slipped into 42 widely used TanStack open-source packages, corrupting 84 npm artifacts before anyone noticed. Within hours, the ...

OpenAI has said it found no evidence that user data was accessed following a security issue linked to a supply-chain attack involving the open-source TanStack npm library. The company said in a ...

TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious versions anyway. The CI/CD Trust-Chain Audit Grid maps the six gaps it ...