Search: “package manager”

1,046 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 725 Malware 552 Ransomware 279 Exploit / PoC 231 Industry 207 Data breach 180 Policy & legal 172 Threat actor 117 Phishing & fraud 110 Tools 36 Research 29 Advisory 26

SeverityAll critical 1047 high 781 medium 496 low 295 info 45

ENISA Technical Advisory on Secure Package Managers: Essential DevSecOps Guidance

Security AffairsMar 12, 08:49 UTC · Mar 12, 2026Advisory CVE-2025-55182

60

Critical flaw in Linux APT package manager could allow remote hack

Security AffairsJan 22, 21:00 UTC · Jan 22, 2019Exploit / PoC CVE-2019-3462

60

Critical Gems Takeover Bug Reported in RubyGems Package Manager

The Hacker NewsMay 11, 02:45 UTC · May 11, 2022Exploit / PoC in the wildCVE-2022-29176

60

Researchers find hidden vulnerabilities in hundreds of Docker containers

Help Net SecurityFeb 23, 00:00 UTC · Feb 23, 2023Vulnerability in the wildCVE-2021-42013 CVE-2021-41773 CVE-2019-175581

60

Critical RCE Bug Found in Homebrew Package Manager for macOS and Linux

The Hacker NewsApr 26, 07:33 UTC · Apr 26, 2021Vulnerability

55

Week in review: AiTM phishing kit used to hijack AWS accounts, year-long malware campaign targets HR

Help Net SecurityMar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-21262 CVE-2026-261271

60

New Linux Privilege Escalation Flaw Uncovered in Snap Package Manager

The Hacker NewsFeb 18, 08:37 UTC · Feb 18, 2022Vulnerability CVE-2021-44731 CVE-2021-3995 CVE-2021-3996+4 CVEs

60

The serpent’s tongue: Luring the Python out of its den

Cisco TalosJul 14, 10:00 UTC · Jul 14, 2026Malware1

55

PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun

Security AffairsJan 28, 08:43 UTC · Jan 28, 2026Exploit / PoC1

60

Flaw in the Packagist PHP repository could have allowed a supply chain attack

Security AffairsOct 4, 20:19 UTC · Oct 4, 2022Exploit / PoC in the wildCVE-2022-24828 CVE-2021-29472

60

Developer Workstations Are Now Part of the Software Supply Chain

The Hacker NewsMay 18, 11:23 UTC · May 18, 2026Threat actor1

60

Zero-day Exploit Found in Adobe Experience Manager

Infosecurity MagazineJun 28, 17:18 UTC · Jun 28, 2021Exploit / PoC

60

The Linux Foundation's Census of OSS app libraries helps prioritize security work

Help Net SecurityMar 3, 00:00 UTC · Mar 3, 2022Industry

55

GitHub flaw could have allowed attackers to takeover repositories of other users

Security AffairsOct 31, 12:11 UTC · Oct 31, 2022Vulnerability

55

Critical RCE flaw patched in Packagist PHP package repository

Security AffairsSep 3, 13:28 UTC · Sep 3, 2018Vulnerability

55

Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source Code

The Hacker NewsJan 26, 16:53 UTC · Jan 26, 2026Exploit / PoC CVE-2025-69264 CVE-2025-69263

60

Google Fixes GCP Composer Flaw That Could've Led to Remote Code Execution

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2024Vulnerability

55

Ubuntu 26.04 LTS delivers memory-safe system tools and live patching for Arm servers

Help Net SecurityApr 24, 00:00 UTC · Apr 24, 2026Vulnerability

55

CISA and OpenSSF Release Framework for Package Repository Security

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2024Vulnerability

55

Sonatype Reports 156% Increase in OSS Malicious Packages

Infosecurity MagazineOct 11, 11:00 UTC · Oct 11, 2024Vulnerability

55

Debunking myths about open-source security

Help Net SecurityNov 20, 00:00 UTC · Nov 20, 2024Vulnerability

55

Pileup flaws in Android PMS menace more than 1 Billion devices

Security AffairsMar 25, 07:54 UTC · Mar 25, 2014Data breach

60

Wormable bash DarkRadiation Ransomware targets Linux distros

Security AffairsJun 22, 20:59 UTC · Jun 22, 2021Ransomware

60

Researchers uncover remote code execution flaw in abandoned Rust code library

CyberScoopOct 21, 20:25 UTC · Oct 21, 2025Vulnerability CVE-2025-625181

60

Traefik Labs introduces Distro Zero secure runtime for API and AI gateways

Help Net SecurityJul 31, 00:00 UTC · Jul 31, 2026Vulnerability

55

PyPI Blocks 1,800 Expired-Domain Emails to Prevent Account Takeovers and Supply Chain Attacks

The Hacker NewsAug 19, 17:29 UTC · Aug 19, 2025Threat actor1

60

Software vulnerabilities push credential abuse aside in cloud intrusions

Help Net SecurityMar 11, 00:00 UTC · Mar 11, 2026Vulnerability in the wild

60

Shai-Hulud worm returns stronger and more automated than ever before

CyberScoopNov 24, 22:45 UTC · Nov 24, 2025Data breach in the wild

60

Threat Brief: OMI Vulnerabilities (CVE-2021-38645, CVE-2021-38647, CVE-2021-38648 and CVE-2021

Palo Alto Unit 42Jun 6, 01:21 UTC · Jun 6, 2024Vulnerability CVE-2021-38645 CVE-2021-38647 CVE-2021-38648+1 CVEs1

60

Grinch Bug Could be worse than Shellshock, Says Experts

Security AffairsNov 5, 23:20 UTC · Nov 5, 2018Exploit / PoC in the wild

60

A New PHP Composer Bug Could Enable Widespread Supply

The Hacker NewsApr 29, 15:27 UTC · Apr 29, 2021Vulnerability CVE-2021-29472

60

ShiftLeft announces code-informed runtime protection for Microsoft’s .Net Framework

Help Net SecuritySep 27, 00:00 UTC · Sep 27, 2018Vulnerability1

55

Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Malware1

55

Hackers target AI and crypto as software supply chain risks grow

Help Net SecurityDec 3, 14:29 UTC · Dec 3, 2025Vulnerability in the wild

60

Critical RCE Bug Affects Millions of OpenWrt

The Hacker NewsMar 24, 20:06 UTC · Mar 24, 2020Vulnerability CVE-2020-7982

60

Dozens of Vulnerable NuGet Packages Allow Attackers to Target .NET Platform

The Hacker NewsJul 8, 07:40 UTC · Jul 8, 2021Vulnerability in the wildCVE-2021-3331 CVE-2016-9840 CVE-2016-9841+2 CVEs

60

Software supply chain attacks are getting easier

Help Net SecurityJan 24, 00:00 UTC · Jan 24, 2024Malware

55

WatchGuard Firebox T Series firewalls: Heightened HTTPS throughput, security services, SD-WAN

Help Net SecurityJun 11, 00:00 UTC · Jun 11, 2020Ransomware

60

phpMyAdmin Releases Critical Software Update — Patch Your Sites Now!

The Hacker NewsDec 11, 15:49 UTC · Dec 11, 2018Vulnerability CVE-2018-19968 CVE-2018-19969 CVE-2018-19970

60

10 Credential Stealing Python Libraries Found on PyPI Repository

The Hacker NewsAug 10, 05:22 UTC · Aug 10, 2022Malware

55