The typosquatted “@acitons/artifact” package targeted GitHub’s CI/CD workflows, stealing tokens and publishing malicious ...

We've seen in the past two Bulletins that control system cybersecurity is the black sheep of IT, a hard-to-change tanker's course. Still, with ...

Developers will have to contend with a dormant turned active malicious code on Visual Studio Code (VS Code) extensions, which ...

The GlassWorm malware has reared its ugly head again in the Open VSX registry, roughly two weeks after being removed.

GlassWorm, a self-propagating VS Code malware first found in the Open VSX marketplace, continues to infect developer devices ...

Weeks after being declared eradicated, GlassWorm is again infesting open source extensions using the same invisible Unicode ...

The GlassWorm malware campaign, which impacted the OpenVSX and Visual Studio Code marketplaces last month, has returned with ...

There’s another ransomware story this week, but this one comes with a special twist. If you’ve followed this column for long, ...

Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities ...

The security research team at JFrog, a provider of a platform for building and deploying software, have discovered a critical vulnerability in a node ...

The leak has now been fixed. According to the Open VSX team, the incident has been fully contained and closed since October ...