The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...

GlassWorm attack uses stolen GitHub tokens to inject malware into Python repositories, exposing developers to supply chain risks.

The infamous GlassWorm malware has infected dozens more Open VSX software packages, according to new research.

GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...

Ramen, developer of the best-in-class multi-agent AI assistant for Unreal Engine, Aura, announced that it has acquired Coplay, developers of the premium AI tool of the same name for Unity game ...

How can an extension change hands with no oversight?

The Glassworm campaign has compromised over 151 GitHub repositories and npm packages using invisible Unicode payloads that ...

Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python repositories.

Microsoft is speeding up the delivery of its Visual Studio Code updates. Since last summer, the company has been making ...

Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible code, a technique that’s flummoxing traditional defenses designed to ...

Discover AI Productivity Tools Adoption in Software Engineering Statistics with key data, and trends shaping developer productivity.

These heroes of open source software are hard at work behind the scenes without you even realizing it.