Malicious tensorlake npm version 0.5.144 contained a Shai-Hulud worm that harvests credentials and can republish compromised ...
Eight NPM packages with 40,000 downloads have been delivering malware in the MALFEX supply chain attack campaign.
Analysis of the malicious release suggests it shares code and techniques with the Shai-Hulud variant dubbed ChainDrop by ...
Frontend Tech BriefingToday is a day to prioritize security around Node.js over major releases of new frameworks. In ...
An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by hiding malicious code in a package's normal runtime behavior rather than ...
Eight malicious npm packages downloaded 40,767 times deliver Overlord RAT, a Node.js stealer, and a downloader to Windows ...
Compromised TensorLake npm SDK v0.5.144 deploys a credential-stealing worm targeting GitHub, AWS, Kubernetes, and AI ...
CloudSEK uncovered the MALFEX campaign using malicious npm packages to deploy Overlord RAT, steal Discord and browser data, ...
Forbes contributors publish independent expert analyses and insights. A serious security breach has sent shockwaves through both everyday online services and the cryptocurrency world. At the center is ...
Official Red Hat NPM accounts have been compromised and used to push a malicious worm that spreads from machine to machine, where it pilfers sensitive credentials in hopes of stealing yet more ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results