Bill Toulas is a tech writer and infosec news reporter with over a decade of experience working on various online publications, covering open-source, Linux, malware, data breach incidents, and hacks.

Unknown attackers compromised Injective Labs' GitHub repo to publish npm package 1.20.21, which steals wallet private keys ...

Socket found a compromised Injective npm package stealing wallet keys amid rising crypto supply chain attacks.

In Operation Muck and Load, over 200 GitHub repositories serve a Go module that leads to Windows malware infections.

TypeScript 7.0 became stable on July 8, 2026 — and for most of the tens of millions of professional web developers who depend on it daily, a single npm install -D typescript command now cuts build ...

Injective has dismissed concerns that user funds were compromised after attackers planted wallet-key-stealing code in 18 of ...