Open Source Software

AI Models Community Contributions Licensing Code Repositories Chromium AI Development Security Flaws AI Tools AI Frameworks GitHub

34 ARTICLES

4w ago

NPM Phishing Breach Pushes Malicious Updates to Widely Used JavaScript Packages, Yet Financial Hit Is Tiny

Rapid detection of build failures led researchers and maintainers to pull compromised versions within hours, cutting short a browser-side crypto-clipper that aimed to swap wallet addresses.

4 ARTICLES

4w ago

NYU Confirms 'PromptLock' as Lab-Built LLM Ransomware Prototype After ESET Discovery

9 ARTICLES

last mo.

PayPal and Venmo Offer Early Access to Perplexity’s Comet With a Free Year of Pro

7 ARTICLES

last mo.

Malicious npm Packages Tap Ethereum Smart Contracts for Stealthy C2

9 ARTICLES

last mo.

Nx npm Packages Compromised in 'S1ngularity' Attack With Second-Wave Exploitation Emerging

4 ARTICLES

last mo.

MCP Enters Enterprise Workflows as Block Scales Use and Engineers Rethink Tool Design

4 ARTICLES

last mo.

Coinbase Listing Speculation Reignites for Pi Network as Open-Source Push Hits 90%

12 ARTICLES

last mo.

Databricks Sets Over $100 Billion Valuation in Oversubscribed Series K

4 ARTICLES

last mo.

PyPI Starts Daily Expired-Domain Checks, Unverifies 1,800 Emails to Block Account Takeovers

6 ARTICLES

last mo.

Cyata’s Black Hat Disclosure Prompts Patches for 14 Conjur and Vault Vulnerabilities

3 ARTICLES

2mo ago

Microsoft Patches NLWeb Security Flaw but Declines CVE Assignment

6 ARTICLES

2mo ago

Phishing Campaign Targets Mozilla and PyPI Developer Accounts

8 ARTICLES

2mo ago

Google Publishes First 20 Vulnerabilities Found by Big Sleep AI

9 ARTICLES

2mo ago

NVIDIA Releases Triton Server Version 25.07 to Patch Critical Python-Backend Flaws

3 ARTICLES

2mo ago

Researchers Remove AI-Generated npm Wallet Drainer, Publish IoCs

6 ARTICLES

2mo ago

Enterprises Tighten Security for Anthropic’s Model Context Protocol as Vulnerability Reports Rise

4 ARTICLES

2mo ago

PyPI Battles Live Phishing Campaign Exploiting Typosquatted Domain

Particle.news

Open Source Software

NPM Phishing Breach Pushes Malicious Updates to Widely Used JavaScript Packages, Yet Financial Hit Is Tiny

NYU Confirms 'PromptLock' as Lab-Built LLM Ransomware Prototype After ESET Discovery

PayPal and Venmo Offer Early Access to Perplexity’s Comet With a Free Year of Pro

Malicious npm Packages Tap Ethereum Smart Contracts for Stealthy C2

Nx npm Packages Compromised in 'S1ngularity' Attack With Second-Wave Exploitation Emerging

MCP Enters Enterprise Workflows as Block Scales Use and Engineers Rethink Tool Design

Coinbase Listing Speculation Reignites for Pi Network as Open-Source Push Hits 90%

Databricks Sets Over $100 Billion Valuation in Oversubscribed Series K

PyPI Starts Daily Expired-Domain Checks, Unverifies 1,800 Emails to Block Account Takeovers

Google Launches Gemma 3 270M to Enable Hyper-Efficient On-Device AI

Never miss stories about

Open Source Software

Docker Hub Retains 35 Container Images Harboring XZ-Utils Backdoor

Ethereum Foundation Pledges $1 Million to Back Roman Storm’s Appeal

Cyata’s Black Hat Disclosure Prompts Patches for 14 Conjur and Vault Vulnerabilities

Microsoft Patches NLWeb Security Flaw but Declines CVE Assignment

Phishing Campaign Targets Mozilla and PyPI Developer Accounts

Google Publishes First 20 Vulnerabilities Found by Big Sleep AI

NVIDIA Releases Triton Server Version 25.07 to Patch Critical Python-Backend Flaws

Researchers Remove AI-Generated npm Wallet Drainer, Publish IoCs

Enterprises Tighten Security for Anthropic’s Model Context Protocol as Vulnerability Reports Rise

PyPI Battles Live Phishing Campaign Exploiting Typosquatted Domain

Never miss stories about

Open Source Software