Cybernews

A campaign of roughly 10,000 GitHub repositories has been distributing Trojans for over a year by cloning legitimate projects, injecting malicious download links, and evading detection through commit-…

A malicious npm package named codexui-android, which amassed roughly 27,000 weekly downloads, secretly exfiltrated OpenAI Codex authentication tokens by sending the contents of users' auth.json files …