Researchers uncover more than 80,000 leaked passwords, keys, and sensitive files exposed on popular online code formatting ...

A large trove of sensitive credentials, authentication keys, configuration data, tokens, and API keys has been potentially ...

A new iteration of the Shai-Hulud malware that ran through npm repositories in September is faster, more dangerous, and more destructive, creating huge numbers of malicious repositories, compromised ...

Approximately 640 NPM packages have been infected with a new variant of the Shai-Hulud self-replicating worm in a fresh wave of attacks.

WormGPT 4 sales began around September 27 with ads posted on Telegram and in underground forums like DarknetArmy, according ...

While the September 2025 Shai-Hulud attack focused primarily on credential harvesting and self-propagation, this new variant ...