#oss

Google Pauses OSS Product Bug Bounty Rewards After Surge in Invalid Automated Reports

Oct 6, 2026 // 12:47

Google has stopped accepting product vulnerability reports through its bug bounty program for its open-source software. The change, in effect since October 1, means researchers […]

Warning: Malicious Laravel Packages on Packagist Targeting All Major OSs

Mar 4, 2026 // 14:16

Security researchers at Socket discovered several malicious Packagist packages masquerading as Laravel utilities. These packages deploy a cross-platform Remote Access Trojan (RAT) targeting Windows, macOS, and Linux systems. Malicious Packages Identified The threat […]