npm

Software supply chain security vulnerabilities

3 clusters · 7 sources · last updated about 21 hours ago

Latest: Security researchers highlight risks in npm and pnpm package execution

Security researchers have identified several significant software supply-chain vulnerabilities and malicious campaigns targeting developers through the npm registry and GitHub. Initial findings detailed the MALFEX campa

AI adoption and the evolution of software engineering

199 clusters · 621 sources · last updated 1 day ago

Latest: AI coding agents face context tax delays

Since April 2026, AI agents have transitioned from design pilots to core functions in analytics, energy, finance, and education. While usage is widespread, application remains focused on writing code. At Google, engineer

Software supply-chain attacks targeting developers

2 clusters · 12 sources · last updated 6 days ago

Latest: Malicious npm and PyPI package releases target developer credentials

Cybersecurity researchers have identified multiple supply-chain attacks targeting developer environments through malicious packages on the npm and PyPI registries. An initial campaign named NEBULA utilized npm packages

Wiz reports on software supply chain and AI agent security

2 clusters · 9 sources · last updated 7 days ago

Latest: AI coding agents present security and technical debt risks

Wiz has identified growing vulnerabilities within the software supply chain, specifically regarding Kubernetes and open-source packages. The company introduced WizOS Helm charts to mitigate security gaps in Kubernetes, n

Anthropic Claude software updates and integrations

33 clusters · 363 sources · last updated 13 days ago

Latest: Anthropic adds OpenTelemetry support to Claude platform

Anthropic has expanded its Claude ecosystem through enhanced cross-platform functionality, workspace integrations, and unified memory systems. Following the release of Claude Code for macOS and Linux, the company updated