A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...
Self-propagating malware named 'ChainDrop' has compromised more than 1,300 packages with a combined 2 billion monthly ...
The Shai Hulud variant’s blast radius includes several highly popular packages thus far.. Security teams are urged to perform ...
Upwind identified a malicious release of keyv@6.0.0 that harvested AWS, GitHub, and npm credentials via a hidden preinstall script. With 154 million weekly downloads, the compromise had ecosystem-wide ...
DOUBLECUP hides malware stages in cached PNG files, then uses ClickFix commands to deliver CountLoader variants and the ...
New York, USA, August 4th, 2026, FinanceWireOpen-source software has long been built on trust. Developers routinely install ...
Online advertising firm Adform suffered a supply-chain attack that delivered cryptocurrency-stealing scripts to websites ...
CERT-UA links UAC-0099 to a fake Notepad++ plugin that deploys BURNYBEAR and MATCHBOIL.V2, with persistence running every ...
Tech Times on MSN
Arch Linux freezes AUR adoption: Tor-backed Rust infostealer bypasses June defenses in third wave
Arch Linux AUR malware has forced an emergency adoption freeze after Wave Three of the Atomic Arch campaign deployed a ...
IT researchers have discovered malware distributed via malvertising. It is assembled in the browser.
A hot potato: The developer behind popular Windows optimization tool Wintoys has uncovered a sophisticated cybercrime operation that mimics dozens of popular Windows apps through duplicate websites ...
Do you use JavaScript Obfuscator at your company? JavaScript Obfuscator has reached over 1 million npm downloads per week. I am currently preparing an EB-1 immigration case and collecting independent ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results