BTC
—
—
ETH
—
—
SOL
—
—
BNB
—
—
GOLD
—
—
XRP
—
—
DOGE
—
—
ADA
—
—

Trending

Security

axios Compromised on npm – Malicious Versions Drop Remote Access Trojan – StepSecurity

On March 31, 2026, attackers hijacked a lead maintainer's npm account for axios, the popular JavaScript HTTP client with over…
Tech

Claude Code’s source code has been leaked via a map file in their NPM registry

Mar 31 · 4 min
Crypto

Future US governments could crack down on crypto without clear rules: Coin Center

Mar 29 · 3 min
Tech

Claude finds RCE in Vim and Emacs

Mar 31 · 3 min

Latest

Security

[HIGH] Security Advisory: Kedro: Path Traversal in versioned dataset loading via unsanitized version string (kedro)

Apr 3 · 3 min
Security

[HIGH] Security Advisory: OpenSTAManager: SQL Injection via Aggiornamenti Module (devcode-it/openstamanager)

Apr 3 · 3 min
Security

[CRITICAL] Security Advisory: Kedro has Arbitrary Code Execution via Malicious Logging Configuration (kedro)

Apr 3 · 3 min
Security

[HIGH] Security Advisory: Ajenti has an authorization bypass during custom package installation (ajenti-panel)

Apr 3 · 3 min
Tech

A CSS Engine in OCaml

Apr 3 · 3 min
Security

[MEDIUM] Security Advisory: OpenClaw: HTTP operator endpoints lack browser-origin validation in trusted-proxy mode (openclaw)

Apr 3 · 2 min
Security

[MEDIUM] Security Advisory: OpenClaw: Host exec environment overrides miss proxy, TLS, Docker, and Git TLS controls (openclaw)

Apr 3 · 3 min
Security

[LOW] Security Advisory: OpenClaw: Telnyx Webhook Replay Detection Bypass via Base64 Signature Re-encoding (openclaw)

Apr 3 · 3 min
Security

[HIGH] Security Advisory: OpenClaw: Device-Paired Node Skips Node Scope Gate → Host RCE.md (openclaw)

Apr 3 · 3 min
Security

[MEDIUM] Security Advisory: OpenClaw: Feishu thread history and quoted messages bypass sender allowlist (openclaw)

Apr 3 · 3 min
Security

[HIGH] Security Advisory: OpenClaw: Workspace `.env` can override the bundled hooks root and load attacker hook code (openclaw)

Apr 3 · 3 min
Security

[MEDIUM] Security Advisory: OpenClaw: LINE webhook handler lacks shared pre-auth concurrency budget before signature verification (openclaw)

Apr 3 · 3 min