Do Son Socket discovers 4 malicious npm packages designed to drain crypto wallets on BSC & Ethereum, downloaded over 2,100 times.
supply chain attack
A new npm supply chain attack, "xlsx-to-json-lh," uses typosquatting to enable remote code execution, silently awaiting a "kill switch" to delete project directories.
A sophisticated PyPI supply chain attack, "cappership," steals Solana private keys by monkey-patching, leveraging transitive dependencies and blockchain exfiltration.
RVTools briefly hijacked in a Bumblebee malware supply chain attack. Learn how attackers used a trusted tool to deliver post-exploitation payloads.
Interlock Ransomware breached AMTEC, leaking sensitive defense data and raising concerns over espionage and national security risks.
Attackers used Google Calendar invites and Unicode PUAs to deliver obfuscated malware via NPM. Aikido uncovers this novel supply chain attack.
A malicious PyPI package named 'solana-token' targeted Solana developers to steal code and secrets. Learn how it worked and how to stay safe.
Earth Ammit’s VENOM and TIDRONE campaigns target Taiwan and South Korea’s drone, military, and satellite sectors via stealthy supply chain attacks.
Aikido discovers a Remote Access Trojan (RAT) hidden in rand-user-agent, a popular npm package with 45,000 weekly downloads.
A large-scale supply chain attack has injected backdoors into e-commerce software, potentially affecting 500-1,000 stores. Sansec urges immediate checks.
Socket discovers Python packages abusing Gmail SMTP for covert C2 tunnels, evading firewalls and exfiltrating data through trusted email infrastructure.
CVE-2025-32965: A backdoor in xrpl.js SDK allows theft of crypto wallet keys. Users must upgrade and rotate compromised credentials immediately.
Malicious npm packages are targeting Telegram bot developers, installing SSH backdoors and stealing data. Learn how this supply chain attack works and how to protect yourself.
A malicious npm package, disguised as an Advcash integration, contains a reverse shell that triggers after successful payments, granting attackers server access.
A fake npm package named pdf-to-office has been discovered injecting malicious code into Atomic and Exodus crypto wallets, redirecting funds and stealing data
FortiGuard Labs discovers malicious NPM packages targeting PayPal users. Attackers use deceptive tactics to steal usernames, paths, and hostnames
Explore the recent CISA warnings regarding GitHub Action vulnerabilities and the impact on Fortinet FortiOS and FortiProxy.
Learn about the supply chain attack on Ultralytics, a popular AI library with over 60 million downloads, and how it was exploited through GitHub Actions scripts.
Warning: Security alert for Solana Web3.js users! Learn about a recent supply chain attack on the widely-used JavaScript library and how it puts developers and users at risk.
Stay informed about the latest supply chain attack on cryptocurrency wallets via PyPI. Discover the malicious aiocpa package and steps to enhance your security.
Discover the use of Ethereum smart contracts in a sophisticated supply chain attack, bringing a new level of complexity to malware operations.
Beware of the CryptoAITools malware campaign targeting cryptocurrency users. Learn how this sophisticated attack steals data and drains wallets.