
npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

Packagist Supply Chain Attack Infects 8 Packages Using GitHub-Hosted Linux Malware

Italy disrupts CINEMAGOAL piracy app that stole streaming auth codes
Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

‘Underminr’ Vulnerability Lets Attackers Hide Malicious Connections Behind Trusted Domains
Laravel-Lang PHP Packages Compromised to Deliver Cross-Platform Credential Stealer

LiteSpeed cPanel Plugin CVE-2026-48172 Exploited to Run Scripts as Root
