Technology ❯ Cybersecurity ❯ Malware

Supply Chain Attacks

npm Packages Credential Theft Python Packages Open Source Software npm Worms NPM Packages npm Ecosystem GitHub Actions GlassWorm Sha1-Hulud

14 ARTICLES

3d ago

ChainDrop Worm Infects Hundreds of npm Packages

Stolen GitHub credentials let poisoned releases run a Bun‑launched infostealer that harvests developer and cloud secrets, repackages them, and propagates through npm.

4 ARTICLES

last wk.

Microsoft Disables Dozens of GitHub Repos After Credential‑stealing Code Targeted AI Coding Tools

3 ARTICLES

2mo ago

Rust Stealer IronWorm and New Miasma Worm Infect Dozens of npm Packages

6 ARTICLES

2mo ago

Red Hat npm Packages Backdoored to Deliver 'Miasma' Credential‑Stealing Worm

3 ARTICLES

2mo ago

JINX-0164 Uses Fake Recruiter Lures to Deliver macOS Malware to Crypto Developers

9 ARTICLES

2mo ago

TrapDoor Malware Hits npm, PyPI and Crates.io to Steal Developer Secrets

10 ARTICLES

2mo ago

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

13 ARTICLES

2mo ago

TeamPCP Worm Poisons Hundreds of npm and PyPI Packages With Signed Malicious Releases

3 ARTICLES

2mo ago

Checkmarx Confirms Tainted Jenkins Plugin and Ships Clean Updates

3 ARTICLES

3mo ago

JDownloader Restores Site After Hack Replaced Official Installers With Malware

9 ARTICLES

3mo ago

DAEMON Tools Confirms Supply-Chain Breach, Releases Clean Lite 12.6

7 ARTICLES

3mo ago

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

3 ARTICLES

3mo ago

73 Cloned OpenVSX Extensions Linked to GlassWorm Act as Malware Loaders

14 ARTICLES

3mo ago

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

Supply Chain Attacks

ChainDrop Worm Infects Hundreds of npm Packages

Adform Tracking Script Compromised to Swap Cryptocurrency Wallets

Sandworm_Mode Worm Targets AI Development Toolchains

Multi‑Stage Malware Found in Four AsyncAPI npm Packages

Injective SDK Npm Release Backdoored to Steal Wallet Keys

Malicious JetBrains Plugins Steal AI API Keys From Developers

AUR Package Takeovers Deliver eBPF Rootkit Through Malicious npm Package

Microsoft Disables Dozens of GitHub Repos After Credential‑stealing Code Targeted AI Coding Tools

Rust Stealer IronWorm and New Miasma Worm Infect Dozens of npm Packages

Red Hat npm Packages Backdoored to Deliver 'Miasma' Credential‑Stealing Worm

Never miss stories about

Supply Chain Attacks

JINX-0164 Uses Fake Recruiter Lures to Deliver macOS Malware to Crypto Developers

TrapDoor Malware Hits npm, PyPI and Crates.io to Steal Developer Secrets

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

TeamPCP Worm Poisons Hundreds of npm and PyPI Packages With Signed Malicious Releases

Checkmarx Confirms Tainted Jenkins Plugin and Ships Clean Updates

JDownloader Restores Site After Hack Replaced Official Installers With Malware

DAEMON Tools Confirms Supply-Chain Breach, Releases Clean Lite 12.6

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

73 Cloned OpenVSX Extensions Linked to GlassWorm Act as Malware Loaders

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

Never miss stories about

Supply Chain Attacks