CanisterWorm infects 28 npm packages via ICP-based C2, enabling self-propagation and persistent backdoor access across developer systems.

NemoClaw is NVIDIA’s open source stack for secure AI agents, offering sandboxing, privacy controls, flexible deployment, and efficient runtime management.

Former training and development professional builds AI governance framework now managing 13 autonomous agents for ...

JFrog has uncovered GhostClaw, a fake OpenClaw npm package that stole Keychain passwords, cloud credentials, and crypto wallets from 178 macOS developers.

The Trivy vulnerability scanner was compromised in a supply-chain attack by threat actors known as TeamPCP, which distributed ...