The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting hundreds of packages in the NPM ...
Researchers found a fake Ethereum helper package on crates.io that secretly downloaded OS-specific payloads and executed them on developer machines.
OpenAI patched a command injection flaw in its Codex CLI tool that let attackers run arbitrary commands on developer machines ...
Researchers found that .env files inside cloned repositories could be used to change the Codex CLI home directory path and ...
Microsoft has silently mitigated CVE-2025-9491, a Windows vulnerability exploited to distribute malware via LNK files ...
OpenAI recently patched a Codex CLI vulnerability that can be exploited in attacks aimed at software developers.
The LNK vulnerability was used to launch remote code execution in cyber-espionage, data theft, and fraud attacks.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback