CVE Lite CLI helps developers quickly identify and fix vulnerable npm dependencies during development, reducing delays and ...
A github.dev flaw could let attackers steal GitHub OAuth tokens through a one-click attack, exposing private repositories and ...
A new supply-chain attack has infected 36 packages on the Node Package Manager (npm) index with infostealer malware called IronWorm. The malware targets 86 environment variables (key-value pairs) and ...
Vercel has released Next.js 16.2, featuring performance enhancements that make development startup 400% faster and rendering ...
The codexui-android npm package silently exfiltrated OpenAI Codex auth tokens to an attacker server for a month, affecting 29,000 weekly downloads.
A VS Code vulnerability in GitHub.dev lets attackers steal full GitHub OAuth tokens via a single malicious link, exposing all private repositories.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results