Yellow.ai's customer service chatbot had a major security flaw that enabled cookie theft and account hijacking. The issue has been patched.

JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.