The Open Source Security Foundation today launched its Malicious Packages Repository, an open-source system for collecting and publishing cross-ecosystem reports of malicious packages. Claimed to be ...

Documenting code can be dull, but explaining the source code of a complex project is hard for AI to get right Google has ...

Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages.

A new report out today from Fortinet Inc.’s FortiGuard Labs highlights a growing wave of malicious software packages exploiting system vulnerabilities. Based on data collected since November 2024, the ...

Coinbase layer-2 network Base has announced it has open-sourced its code repositories and smart contracts to increase transparency and accountability while simultaneously allowing public contributions ...

The open-source code repository Codeberg has blamed the far right for a recent campaign of abuse and harassment across its systems. “Projects advocating tolerance and equal rights” were subjected to ...

Chinese AI lab DeepSeek plans to open source portions of its online services’ code as part of an “open source week” event next week. DeepSeek will open source five code repositories that have been ...

AI startup DeepSeek announced plans to open-source five of its code repositories, a move aimed at fostering transparency and community-driven innovation. A code repository is a centralized storage ...

The volume of malicious activity targeting upstream open source code repositories has hit triple-digit growth over the past three years, according to Sonatype. The security vendor claimed in newly ...

The 2025 Global Developer Conference (GDC) was held in Shanghai from February 22 to 23, gathering top executives, developers, and industry professionals. Unlike other participants, DeepSeek chose not ...

A department builds something new (all too often something that already exists) puts the code in a public GitHub repository, ...

As open source software (OSS) is continually utilized across industries, the legal landscape surrounding its use has grown ...