Jul 15, 2025Ravie LakshmananMalware / Internet Safety The North Korean risk actors linked to the Contagious Interview marketing campaign have…
Read More
North Korea-linked Provide Chain Assault Targets Builders with 35 Malicious npm Packages
Jun 25, 2025Ravie LakshmananMalware / Open Supply Cybersecurity researchers have uncovered a recent batch of malicious npm packages linked to…
Read More
New npm threats can erase manufacturing methods with a single request
Basically, the code listens for a request containing a hardcoded key “DEFAULT_123” and, when triggered, executes a harmful rm-rf* command,…
Read More
New Provide Chain Malware Operation Hits npm and PyPI Ecosystems, Concentrating on Thousands and thousands Globally
Cybersecurity researchers have flagged a provide chain assault focusing on over a dozen packages related to GlueStack to ship malware.…
Read More
Malicious PyPI, npm, and Ruby Packages Uncovered in Ongoing Open-Supply Provide Chain Assaults
A number of malicious packages have been uncovered throughout the npm, Python, and Ruby bundle repositories that drain funds from…
Read More
Hackers drop 60 npm bombs in lower than two weeks to recon dev machines
Masquerading as innocent plugins and utilities, the malicious packages carried damaging payloads meant to deprave knowledge, wipe vital information, and…
Read More
Over 70 Malicious npm and VS Code Packages Discovered Stealing Information and Crypto
As many as 60 malicious npm packages have been found within the package deal registry with malicious performance to reap…
Read More
Malicious npm Package deal Leverages Unicode Steganography, Google Calendar as C2 Dropper
Might 15, 2025Ravie LakshmananMalware / Menace Intelligence Cybersecurity researchers have found a malicious package deal named “os-info-checker-es6” that disguises itself…
Read More
Malicious npm Packages Infect 3,200+ Cursor Customers With Backdoor, Steal Credentials
Cybersecurity researchers have flagged three malicious npm packages which are designed to focus on the Apple macOS model of Cursor,…
Read More
Hackers booby lure NPM with cross-language imposter packages
Hackers are abusing the Node Bundle Supervisor (NPM) registry — a database of JavaScript packages — to focus on multi-language…
Read More
