A self-replicating npm worm dubbed SANDWORM_MODE hits 19+ packages, harvesting private keys, BIP39 mnemonics, wallet files and LLM API keys from dev environments.
Hulud-like Sandworm_Mode supply chain attack targets NPM developers to steal secrets and poison AI assistants.
Nested Claude Code runs parallel tasks through Tmux; auto-picks terminal count and routes input, with real-time activity logs ...
Cline CLI 2.3.0 was published with a stolen npm token, installing OpenClaw in an 8-hour attack affecting ~4,000 downloads.
At least 187 code packages made available through the JavaScript repository NPM have been infected with a self-replicating worm that steals credentials from developers and publishes those secrets on ...
The launch of Anthropic’s coding tool, Claude Code, is off to a rocky start. According to reports on GitHub, Claude Code’s auto-update function contained buggy commands that rendered some workstations ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results