Compliance continues to drive adoption of trusted open source: We saw the same themes from December present here, underscored ...

How AI has suddenly become much more useful to open-source developers ...

Meta has indefinitely paused work with $10B AI data startup Mercor after a LiteLLM supply chain attack exposed training ...

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

A growing body of academic research warns that AI-assisted “vibe coding,” where language models assemble software from ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

Be more productive and save money on app and subscription fees.

The threat group's shift to speedy attacks on AWS, Azure, and SaaS instances shows organizations need to respond quickly to ...

The TeamPCP hacking group has hacked the Telnyx PyPI package as part of a supply chain campaign targeting the broad OSS ecosystem.

AI recruiting startup Mercor confirms supply chain attack via LiteLLM library compromise. Hackers claim 4TB of data including ...

The source code of Anthropic's CLI tool Claude Code was accidentally made publicly accessible via a source map in the npm ...

A critical supply chain attack has compromised the popular JavaScript library axios, leading to developers unknowingly ...