The Bitwarden CLI NPM package compromise is tied to a Checkmarx supply chain attack and references the Shai-Hulud worm.

As supply-chain attacks against widely-used, open-source software repositories continue, experts are urging developers to not ...

Vercel has confirmed a security breach linked to a compromised third-party AI tool, exposing some environment variables and ...

Vercel confirmed a security incident involving unauthorized access to internal systems, stemming from a compromised ...

Hackers injected credential-stealing malware into the Bitwarden CLI tool via a supply chain attack on the NPM package, ...

Bitwarden’s command-line interface package was briefly poisoned through npm after attackers abused a GitHub Actions workflow in its software release pipeline, turning a trusted password-management ...

Etherpad is a self-hostable web editor written in Node.js for real-time collaborative writing – functionally comparable to ...