Codex tokens were exfiltrated via a popular npm package, affecting users since v0.1.82 and enabling persistent account access ...

A dependency confusion campaign leveraged 33 malicious npm packages to collect reconnaissance data from developer and build environments. This report details the attack chain, observed tradecraft, and ...

Microsoft has identified an active supply chain attack targeting the npm package ecosystem. On May 28, 2026, a single threat actor operating under the newly created maintainer alias vpmdhaj (a39155771 ...

Expand Energy Corp. engages in the production and development of natural gas, oil, and natural gas liquids. Its operations include Haynesville, Northeast Appalachia, and Southwest Appalachia. The ...

Natural gas producers compete with oil producers, who throw off low-cost gas. Associated gas production is expected to continue growing as oil fields age and new pipelines are developed.