Or, why the software supply chain should be treated as critical infrastructure with guardrails built in at every layer.

The exposure traces back to version 2.1.88 of the @anthropic-ai/claude-code package on npm, which was published with a 59.8MB ...

IntroductionOn March 31, 2026, Anthropic accidentally exposed the full source code of Claude Code (its flagship ...

A supply-chain attack backdoored versions of Axios, a popular JavaScript library that's present in many different software ...

The biggest story of the week is a new massive supply chain breach, which appears to be unrelated to the previous massive supply chain breaches, this time of the Axios HTTP project. Axios was ...

Attackers stole a long-lived npm token from the lead axios maintainer and published two poisoned versions that drop a ...

In early April 2025, security researchers confirmed that North Korean state-sponsored hackers had successfully compromised the Axios HTTP library. It is one ...

Anthropic accidentally exposed over half a million lines of its Claude Code, triggering a rapid global effort to copy and ...

A growing body of academic research warns that AI-assisted “vibe coding,” where language models assemble software from ...

Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

The Internet Bug Bounty program has paused new submissions, citing a massive expansion in vulnerability discovery by AI code ...

The world's most popular CMS has been remade with the help of AI. Cloudflare has released EmDash version 0.1, described as a ...