Attackers hijacked 400+ Arch Linux AUR packages to run a Rust credential stealer, with optional eBPF rootkit support on root ...

My $35 server works harder than some PCs.

Attackers hijacked over 1,500 packages in Arch Linux's AUR to plant a credential stealer. The official repos are safe, but the trust model took the hit.

Homebrew 6.0.0 shipped June 11 with tap trust, a mechanism that blocks arbitrary Ruby code from third-party taps until ...

The Alpine Linux team has released Alpine Linux 3.24, bringing updates to numerous system packages and adding support for ...

The tools Linux developers love are coming to Windows.

Cybersecurity investigators have exposed a cryptocurrency theft campaign that used fake GitHub popularity, AI-narrated YouTube videos, manipulated download figures ...

npm 12 disables install scripts by default, requiring explicit approval to reduce dependency-based code execution risks.

July 2026, blocking install scripts, Git dependencies, and remote URL sources by default. Every team running npm install in ...

The change, expected in July, will likely block one of the more common attack vectors; developers are wondering what took ...

In response to recent software supply chain attacks, NPM version 12 is blocking the automatic script execution at install.

Iron and steel may be some of the strongest materials on earth, but they’re no match for the elements. Ferrous metals start to rust after only a few hours of exposure to air and water. Left unchecked, ...