Hackers backdoor Jscrambler npm package with infostealer malware

The Jscrambler client-side web security company disclosed that a threat actor published a malicious version of its npm ...
TMCnet

97% of commercial software runs MIT-licensed open source, removing dev tool barriers ...

State of Open Source Report. According to the 2025 Open Source Security and Risk Analysis (OSSRA) Report from Black Duck, ...