Researchers say the campaign targeted developer credentials and cloud secrets while abusing trusted publishing and AI coding ...
A threat group planted a malicious npm package in a crypto trading project through an AI-generated commit by Anthropic's Claude.