The npm package @7nohe/openapi-react-query-codegen, which receives roughly 150,000 weekly downloads, has been compromised by ...

MCP server in Compose Hot Reload allows agents to trigger reloads, take screenshots, inspect the semantic tree, simulate text ...

A new Shai-Hulud supply-chain campaign, tracked as Trinitite, has compromised the npm package ...