npm package security

BigTech Companies

19 Malicious Visual Studio Code Extensions Uncovered

A malicious campaign used 19 Visual Studio Code extensions to hide malware, often by embedding a tampered npm package or…

Read More »
Business

Secure SDLC: A Manufacturer’s Critical Defense

The Jaguar Land Rover cyberattack was a catastrophic manufacturing breach that halted production, caused billions in economic damage, and forced…

Read More »
Artificial Intelligence

Critical RCE Flaw Found in Popular expr-eval JavaScript Library

A critical remote code execution vulnerability (CVE-2025-12735) has been found in the widely used expr-eval JavaScript library, affecting over 800,000…

Read More »