Do Son Malicious npm packages have been silently destroying files and corrupting data in React, Vue.js, and Vite projects for over two years.
npm
A malicious plugin is putting chatbot privacy at risk, silently stealing user messages. Is your Koishi bot compromised?
Malicious open-source packages are stealing crypto wallet credentials! Learn about the threat and how to protect your seed phrases and private keys.
Malicious npm packages are targeting Telegram bot developers, installing SSH backdoors and stealing data. Learn how this supply chain attack works and how to protect yourself.
A malicious npm package, disguised as an Advcash integration, contains a reverse shell that triggers after successful payments, granting attackers server access.
FortiGuard Labs discovers malicious NPM packages targeting PayPal users. Attackers use deceptive tactics to steal usernames, paths, and hostnames
Uncover the reverse shell threat. Malicious packages on npm can infect local installations through hidden techniques and scripts.
Discover the latest supply chain attack orchestrated by the North Korean APT Lazarus Group. Learn how the BeaverTail malware infiltrates developer environments.
Uncover the misuse of OAST techniques by threat actors. Learn how ethical security assessments tools are being hijacked for nefarious purposes.
Unveiling a new threat in the VSCode Marketplace: a malicious campaign targeting cryptocurrency users and impersonating popular applications like Zoom.
Beware of a targeted campaign against crypto developers. Learn about the malicious npm packages and the risk they pose to cryptocurrency wallet credentials and sensitive data.
Uncover the dangers of command-jacking in supply chain attacks. Learn how attackers exploit CLI tools to execute malicious code.
The subsequent investigation unveiled a sophisticated RAT deployment masquerading as a standard Microsoft update process.
SentinelOne, a security research organization, demonstrated this by creating a proof-of-concept attack using a maliciously crafted npm package
According to the npm bug report on GitHub, npm user Crunkle noted that npm 5.7.0 completely corrupted...