a Futurum companyTag
4 articles
Sponsored Content
March 2026: malicious versions of axios get published directly to npm. May 2026: attackers forge valid provenance for 42 TanStack packages on npm, with 84 malicious versions shipped before detection. August 2026: a worm uses one m…
Showing 1–4 of 4
AI
Amazon’s recent report attributing a series of compromises of open source software libraries to a North Korea-backed threat group encapsulates many of the expanding cyber risks inc…
Blogs
The threat actor targeted a highly popular open source project with more than 100 million weekly downloads, creating a large “blast radius.”
AI
Anthropic’s Claude Opus 4.6 uncovered more than 600 previously unknown vulnerabilities in widely used open source software, raising new questions about AI-driven security research,…
