Security researcher Chaofan Shou discovered on March 31 that Anthropic's Claude Code CLI tool had its full TypeScript source code sitting in plain sight on the public ...

Attackers stole a long-lived npm access token belonging to the lead maintainer of axios, the most popular HTTP client library in JavaScript, and used it to publish two poisoned versions that install a ...

What is happening: FDA announced on March 11, 2026 that it is creating a single publicly accessible dashboard to allow stakeholders to search adverse events for all regulated products, accomplishing ...

Getting a random package you didn't order used to be either a shipping mistake or a mildly annoying marketing ploy. Now it might be something worse, the FBI has warned in a public service announcement ...

A Bergen County police department is warning the public to be on alert for a nationwide package scam targeting residents' personal information and access to cellphones. The scam involves unsolicited ...

The Python extension now supports multi-project workspaces, where each Python project within a workspace gets its own test tree and Python environment. This document explains how multi-project testing ...

WASHINGTON — If you receive a package you didn’t order, you may not want to open it. The FBI is warning about a new scam where criminals are sending unsolicited packages containing QR codes. This scam ...