Developer Tech

Fake GitHub repositories exploit developer trust to spread malware

Attackers created at least 292 fake GitHub repositories that impersonated developer tools and redirected users to ...
Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...

AsyncAPI npm packages infected with credential-stealing malware

Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that ...
GitHub

deepl-node

Official Node.js Client Library for the DeepL API. The DeepL API is a language translation API that allows other computer programs to send texts and documents to DeepL's servers and receive ...