The unified service supports browser automation, distributed connections and compliant collection of publicly available ...

Malicious npm package indexed-btree impersonated sorted-btree, using nearly 2M weekly downloads to steal data and deliver payloads.

A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.

Exploiting Unauthenticated API Gateways in AWS September 21, 2026 sara.pearlman@guidepointsecurity.com BLOG  5 min. Over the past year, GuidePoint’s Threat and Attack Simulation (TAS) team has ...

JS MAPI didn't want to lose the ability to fix code myself, even if I let AI write it.If I ask AI, it can write quite a lot ...

Artificial lighting was a major step forward for productivity and safety, but it still doesn’t compare to natural light. As ...

For months, npm's defenses against supply chain attacks have focused on one choke point: the moment a package is installed.

The Risk of Data Corruption Lurking in Direct Overwrite SavesDesigning a system that uses methods like Node.js's `fs.writeFileSync` to directly overwrite an existing file (e.g., `config.json`) is the ...

An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by ...

Malicious JavaScript campaigns on e-commerce storefronts evaded VirusTotal in 7 of 8 cases, exposing a structural gap in signature-based scanning. Cloudflare's graph neural network caught all eight ...