Spread the loveIntroduction In a shocking revelation, Drift, a decentralized exchange operating on the Solana blockchain, disclosed that it fell victim to a staggering $285 million theft on April 1, ...

Ventoy, which is an alternative to the popular USB media creation utility app Rufus, has received a major milestone update ...

Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...

On March 31, 2026, the popular HTTP client Axios experienced a supply chain attack, causing two newly published npm packages ...

Explore Homebrew Statistics to uncover key usage trends, installs, and growth insights that help developers make smarter ...

An attacker compromised the npm account of a lead Axios maintainer on March 30, and used it to publish two malicious versions ...

The widely used Axios HTTP client library, a JavaScript component used by developers, was recently hacked to distribute ...

Thanks to the Prism Linux installer, I curated exactly the software I wanted and achieved the holy grail of out-of-the-box ...

TeamPCP strikes again, with almost identical code to LiteLLM.

The TeamPCP hacking group has hacked the Telnyx PyPI package as part of a supply chain campaign targeting the broad OSS ecosystem.

Malicious telnyx 4.87.1/4.87.2 on PyPI used audio steganography March 27, 2026, enabling cross-platform credential theft.