Claude Opus commit added malicious npm dependency in Feb 2026, enabling crypto theft and persistent RAT access.
Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal ...
CVE-2026-42208 exploited within 36 hours of disclosure, exposing LiteLLM credentials, risking cloud account compromise.
Over 750,000 websites require patching following discovery of DotNetNuke XSS vulnerability ...