Artificial intelligence (AI) and machine learning (ML) are now inextricably linked to the software supply chain. ML models, ...

A malicious Python package targeting Discord developers with remote access trojan (RAT) malware was spotted on the Python Package Index (PyPI) after more than three years. Named "discordpydebug ...

Misconfigured Docker API instances have become the target of a new malware campaign that transforms them into a ...

Threat actors have been seen abusing Google Apps Script to launch convincing phishing attacks and steal people’s Microsoft ...

Threat actors are abusing the trusted Google platform 'Google Apps Script' to host phishing pages, making them appear ...

reported them to the Python repository and thus helped get them removed from the platform - however the damage has already been done. According to Socket, there were seven malicious PyPI packages ...

The npm registry is once again in the spotlight, this time battling a malware campaign using malicious packages to map ...

According to new research from Cofense, a new attack has been discovered where, if an employee clicks on a link in a phishing email, they get taken to a page on script [.]google [.]com. The attacker ...