On May 11, 2026, a self-replicating worm called Mini Shai-Hulud quietly slipped into 42 widely used TanStack open-source ...

Bumblebee from Perplexity scans developer machines for compromised packages and AI tool configs, without triggering malware.

OpenAI said it found no evidence that user data was accessed after a supply-chain attack involving the TanStack npm library. The incident has renewed concerns about the security of open-source ...

Mini Shai-Hulud worm compromises 169 npm packages including TanStack Mistral AI; TeamPCP uses stolen OIDC tokens.

On April 29, 2026, someone slipped malicious code into four widely used SAP software packages. Within days, the infection had ...

A poisoned open-source dependency let attackers breach two OpenAI employee devices and steal credentials from a limited set of its internal source code repositories, OpenAI confirmed in a May 14, 2026 ...

OpenAI has confirmed the security breach. According to the company, two employee devices were compromised during a large-scale software supply chain attack connected to the TanStack npm ecosystem.

The Korea rollout gives UiPath local cloud infrastructure for enterprises with data-residency needs, making customer adoption ...

Late last year, software automation firm UiPath, Inc. (PATH) traded as close as around $20. In January, sellers emerged, continuing to dump the stock in February. In March, when the company posted ...

AWS announced that Kiro, its agentic software development platform built around spec-driven development, is getting three upgrades: Parallel Task Execution, which runs independent coding tasks ...