Millions of AI agents and tools around the world have been imperiled by a critical vulnerability that can allow hackers to ...

The risk is "materially understated", researchers are saying as passwords and critical data can be exfiltrated.

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...