What Is LameHug? How APT28 is using LLMs to generate attack commands

npm malware targeting Claude users leaks own GitHub token, reaches 676 downloads

An npm package called "mouse5212-super-formatter" targeting Claude users acted as information-stealing malware, reaching 676 downloads befor

Over 400 AUR Packages Compromised with Infostealer and Rootkit by Malicious Maintainer

A new AUR (Arch User Repository) package maintainer named "arojas" has compromised over 400 packages by adopting and infecting them with inf

CVE-2026-31431 "Copy Fail" Linux Kernel LPE Exploit Proof-of-Concept Released

This article presents a proof-of-concept exploit toolkit for CVE-2026-31431 ("Copy Fail"), a Linux kernel vulnerability in the algif_aead/au

Replacing Dependabot with Targeted GitHub Actions for Go Dependency Management

The article argues that Dependabot, GitHub's automated dependency update tool, creates excessive noise and discourages more meaningful work,

How a Malicious Google Skill on ClawHub Tricks Users Into Installing Malware

ClawHub: A Versioned Registry for AI Agent Skills with Vector Search

ClawHub is a versioned registry for AI agent skills that functions like npm for AI skills, allowing users to browse, install, and publish sk