When OpenAI engineers discovered that a poisoned update to a widely used JavaScript library had executed on two corporate ...

A poisoned open-source dependency let attackers breach two OpenAI employee devices and steal credentials from a limited set of its internal source code repositories, OpenAI confirmed in a May 14, 2026 ...

Open-source low-code developers platform ToolJet has raised funding from M12, the venture arm of Microsoft and cloud-based ...

The JavaScript and TypeScript server and bundler Bun will consist of Rust code in the future. Within weeks, Claude Code ...

A Chromium fork called CloakBrowser, released by New York-based CloakHQ in early 2026, has surpassed 9,200 GitHub stars this week after its latest update added a Windows x64 build and closed what ...

OpenAI said it found no evidence that user data was accessed after a supply-chain attack involving the TanStack npm library.

Fingerprint isolation, stealth browsing, and CAPTCHA solving (hCaptcha, reCAPTCHA, Turnstile) are all free and open-source.

Researchers say the campaign uses a browser-based JavaScript VM to hide credential theft and intercept MFA at scale.

He was brainstorming ideas with an artificial-intelligence tool and getting it to code and create them quickly. Together, ...

Over 170 TanStack, Mistral AI, OpenSearch, UiPath, and other packages were affected in a new Mini Shai-Hulud supply chain ...

Open-source i18n is not blocked by goodwill; it’s blocked by missing maintainer-safe infrastructure. Language contributors ...

In March 2026, someone hijacked a maintainer account for Axios, a JavaScript HTTP library downloaded more than 45 million ...