Malicious remote code execution backdoor discovered in the popular bootstrap-sass Ruby gem

Subversion of bootstrap-sass

NPM Vulnerability Allows 126 Malicious Packages to Be Downloaded 86,000+ Times

Security researchers have discovered a major vulnerability in NPM (Node Package Manager) that allows attackers to distribute malicious packa

Popular npm packages debug and chalk compromised with crypto-intercepting malware

Starting September 8th, 2023, the popular npm packages "debug" and "chalk" were compromised with malicious code. These packages, which colle

Researcher Discovers Critical React2Shell RCE Vulnerability (CVE-2025-55182) Affecting Millions of Websites

A security researcher recounts discovering a critical remote code execution vulnerability (CVE-2025-55182, dubbed "React2Shell") in the Reac

RubyGems.org Security: Multi-Layered Protection Against Malicious Gems

RubyGems.org explains their multi-layered security approach to protect the Ruby ecosystem from malicious gems, detailing automated detection

Red Hat npm supply chain attack compromises 32 packages with credential-stealing malware

A supply chain attack targeted Red Hat's npm namespace (@redhat-cloud-services), with 96 compromised versions across 32 packages backdoored