A critical vulnerability in the popular expr-eval JavaScript library, with over 800,000 weekly downloads on NPM, can be ...

Cybersecurity researchers have flagged a malicious Visual Studio Code (VS Code) extension with basic ransomware capabilities ...

Software supply chain security firm JFrog has disclosed the details of a critical vulnerability affecting a popular React ...

Developers will have to contend with a dormant turned active malicious code on Visual Studio Code (VS Code) extensions, which ...

The GlassWorm malware campaign, which impacted the OpenVSX and Visual Studio Code marketplaces last month, has returned with ...

The bug exposes the Metro development server to remote attacks, allowing arbitrary OS command execution on developer systems ...

The security research team at JFrog, a provider of a platform for building and deploying software, have discovered a critical vulnerability in a node ...

Weeks after being declared eradicated, GlassWorm is again infesting open source extensions using the same invisible Unicode ...

There’s another ransomware story this week, but this one comes with a special twist. If you’ve followed this column for long, ...

The GlassWorm malware has reared its ugly head again in the Open VSX registry, roughly two weeks after being removed.

The Backend-for-Frontend pattern addresses security issues in Single-Page Applications by moving token management back to the ...