Over 170 TanStack, Mistral AI, OpenSearch, UiPath, and other packages were affected in a new Mini Shai-Hulud supply chain ...

Hulud payload to steal CI/CD secrets from Linux-based automation environments. The malware executes during npm install and ...

TeamPCP’s Mini Shai-Hulud campaign used hijacked GitHub OIDC tokens to spread a credential-stealing worm through TanStack npm ...

Yimutian Inc. (Nasdaq: YMT) (“Yimutian” or the “Company”), a leading AI-driven agricultural digital service company in China, today announced that its WolaiCai AI ...

Microsoft confirmed on May 14 that CVE-2026-42897 — a cross-site scripting flaw in the Outlook Web Access component of Exchange Server 2016, 2019, and Subscription Edition — is under active ...

Asentum , a next-generation Layer-1 blockchain built from the ground up with post-quantum security, today announced the official launch of its native token presale for $ASE. The presale is scheduled ...

WordPress 7.0 “Armstrong,” released May 20, 2026, arrived without the real-time collaborative editing feature that had been ...

TanStack had 2FA, OIDC publishing, and Sigstore provenance on every release. The Mini Shai-Hulud worm published 84 malicious ...

TanStack has released a detailed postmortem describing a sophisticated supply-chain attack that compromised 42 npm packages ...

First Customer and Technology On Track for September 2026 Launch PEMBROKE PINES, FL / ACCESS Newswire / May 20, 2026 / BCII ...

The world’s largest open-source registry, node package manager (npm), has been hit by another fast-moving malware attack, ...

The Tycoon2FA phishing kit now supports device-code phishing attacks and abuses Trustifi click-tracking URLs to hijack ...