A pull request with a Rust version of Anthropic’s Bun, a JavaScript toolkit and runtime originally written in Zig, has been ...
Researchers say the campaign uses a browser-based JavaScript VM to hide credential theft and intercept MFA at scale.
OpenAI said it found no evidence that user data was accessed after a supply-chain attack involving the TanStack npm library.