Morning Overview on MSN

Malicious open-source packages have surged 73% in 2026 as attackers poison the software supply chain

In March 2026, someone hijacked a maintainer account for Axios, a JavaScript HTTP library downloaded more than 45 million ...

Kaltura Open-Sources Suite of AI Agent Skills, Enabling Any AI Agent to Build Intelligent Rich-Media Digital Experiences

(Nasdaq: KLTR), the Agentic Digital Experience company, today announced the open-source release of a suite of AI agent skills ...
Cybernews

One tiny exploit gives full Linux access: all kernels since 2017 are vulnerable

The critical "Copy Fail" bug (CVE-2026-31431) affects all Linux kernels since 2017, allowing unprivileged local users to gain ...
The Security Ledger

How Claude Planted Malicious Code In A Crypto-Trading App

A new report from ReversingLabs identified a new tactic by North Korean hackers: feeding malicious code to the AI systems ...
VentureBeat

Hackers slipped a trojan into the code library behind most of the internet. Your team is probably affected

Attackers stole a long-lived npm access token belonging to the lead maintainer of axios, the most popular HTTP client library in JavaScript, and used it to publish two poisoned versions that install a ...
Bleeping Computer

Popular LiteLLM PyPI package backdoored to steal credentials, auth tokens

The TeamPCP hacking group continues its supply-chain rampage, now compromising the massively popular "LiteLLM" Python package on PyPI and claiming to have stolen data from hundreds of thousands of ...
Purdue University

Purdue Quantum Code Library addresses cost, resource, timeliness needs to model next-gen nanoelectronics

WEST LAFAYETTE, Ind. — Electronics manufacturers could benefit from patented and copyrighted Purdue University simulation engines that inexpensively and quickly model semiconductors scaled as small as ...
CNET

4 Sneaky Holiday Package Scams You Need to Know About

Delivery scams involving wrong or missing packages are especially common at this time of year. Here's how to avoid them. Tyler has worked on, lived with and tested all types of smart home and security ...
6abc News

Some retailers offering package protection, but is it worth it?

PHILADELPHIA (WPVI) -- A growing number of retailers are offering consumers a new option when they check out online: order protection, sometimes called package protection. So, what does it cover, and ...
The New York Times

A Surprise When Your Package Arrives: You Have to Pay the Tariff

The end of a tariff exemption on goods worth $800 or less has left some U.S. shoppers with an extra shipping bill that must be paid before delivery. By Peter Eavis Kim Batten, a physical therapist ...
GitHub

Zygisk Library Loader

NepMods Zygisk Library Loader is a lightweight Zygisk module that conditionally injects a native shared library (libxxx.so) into target Android app processes. Configuration is managed via a JSON file ...