The open-source database RxDB 17 now synchronizes data directly via Google Drive or OneDrive – developers no longer need ...
Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ weekly downloads, to deliver ...
Developers using the axios package from npm may have downloaded a malicous version that drops a Remote Access Trojan ...
Anthropic has accidentally exposed Claude Code's full 512,000-line TypeScript source via an npm source map, revealing ...
EmDash is an open-source CMS built on Astro and Cloudflare. Featuring sandboxed plugins, AI-native tools, and 66% faster ...
A version of the AI coding tool in Anthropic's npm registry included a source map file, which leads to the full proprietary ...
The leak provides competitors—from established giants to nimble rivals like Cursor—a literal blueprint for how to build a ...
Anthropic is scrambling to contain the leak, but the AI coding agent is spreading far and wide and being picked apart.
The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...
A North Korea-nexus threat actor compromised the widely used axios npm package, delivering a cross-platform remote access ...
On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...
OpenAI published a Codex plugin on March 30 that installs directly inside Anthropic’s Claude Code, letting developers run code reviews and delegate tasks to Codex without leaving their existing ...