The Cybersecurity and Infrastructure Security Agency (CISA) has released an alert to provide guidance in response to the ...

A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.

Bitwarden has confirmed a serious security incident in which a compromised product was made public. Here's why most users ...

A malicious version of Bitwarden's CLI password manager was briefly distributed via npm after attackers exploited a compromised GitHub Action, in a campaign linked to the Checkmarx supply chain attack ...

A malicious version of the Bitwarden command-line interface (CLI) password manager was briefly distributed via the Node ...

The NPM (Node Package Manager) registry suffers from a security lapse called "manifest confusion," which undermines the trustworthiness of packages and makes it possible for attackers to hide malware ...