Last week, Microsoft released the first stable version of its Windows 10 package manager, Winget, which enables users to manage apps via command-line. Much like package managers available on other platforms, Winget lets...
The official Python software package repository, PyPI, is getting flooded with spam packages, as seen by BleepingComputer. These packages are named after different movies in a...
The Python standard library ipaddress also suffers from the critical IP address validation vulnerability identical to the flaw that was reported in the “netmask” library earlier this year. The researchers...
Popular npm library netmask has a critical networking vulnerability. netmask is frequently used by hundreds of thousands of applications to parse IPv4 addresses and CIDR blocks or compare...
A security researcher was able to add a counterfeit test package to the official list of Microsoft Azure SDK latest releases. The simple trick if abused by...
The Git Project has patched a vulnerability that could result in remote code execution. The bug – tracked as CVE-2021-21300 – is present in several versions of the open source code...
There’s been a 2,000% increase of new malware written in Go over the past few years. The number of malware strains coded in the Go programming...
Only PostgreSQL databases running on Linux servers have been attacked so far. Security researchers have discovered this week a botnet operation that targets PostgreSQL databases to...
Recent Comments