Hackers slipped a trojan into the code library behind most of the internet. Your team is probably affected

Attackers stole a long-lived npm access token belonging to the lead maintainer of axios, the most popular HTTP client library in JavaScript, and used it to publish two poisoned versions that install a [...]

Are You Looking for a Top Momentum Pick? Why Scholastic (SCHL) is a Great Choice

Does Scholastic (SCHL) have what it takes to be a top stock pick for momentum investors? Let's find out. [...]

GitHub confirms 3,800 internal repos stolen through poisoned VS Code extension as supply chain worm hits Microsoft’s Python SDK

GitHub confirmed on May 20 that a poisoned VS Code extension installed on an employee’s device gave attackers access to roughly 3,800 internal repositories at the Microsoft-owned code storage and au [...]

The Shai-Hulud npm worm didn't fake its security check — it earned a legitimate one

An attacker on Tuesday took over the GitHub account of the developer who maintains keyv, a small key-value storage library that npm serves roughly 127 million times a week. Within hours, poisoned vers [...]

Palworld developer Pocketpair has opened up a publishing division

Pocketpair, the company behind the mega-hit game Palworld, just announced a publishing venture. This new division will provide devs with all the support they need “without overstepping.” It also p [...]

AI might undermine one of the better alternatives to the Kindle

Kobo, a Rakuten subsidiary that sells ebooks and ereaders, has built its name on being a more open and author-friendly version of Amazon Kindle. However, a recent change to the company's self-pub [...]

The robots we saw at CES 2026: The lovable, the creepy and the utterly confusing

CES always has its share of attention-grabbing robots. But this year in particular seemed to be a landmark year for robotics. The advancement in AI technology has not only given robots better “brain [...]

Meta's AI support agent bound recovery emails for anyone who asked. Your SOC never saw an alert.

Meta's AI support agent bound recovery emails to accounts for whoever asked, and SOCs never saw an alert. An authorized agent writes a log of legitimate transactions, so nothing in the detection [...]

The best Bluetooth trackers for 2025

Cold weather is an especially rough time for keeping track of one’s keys — so many more layers with so many more pockets — really, they could be anywhere. Stick a Bluetooth tracker on your keyri [...]