All Related Articles for: New npm Malware Spreads Itself in Supply Chain Attack
-
Hacked GitHub via tainted VS Code extension
GitHub confirmed a security breach after TeamPCP infiltrated its…
Read More » -
Hackers Poison Open Source Code at Unprecedented Scale
A cybercriminal group called TeamPCP has transformed software supply…
Read More » -
GitHub Confirms 3,800 Repos Breached via Malicious VSCode Extension
A GitHub employee's device was compromised after installing a…
Read More » -
PureLogs infostealer targets global credentials
A sophisticated phishing campaign uses cat photos to hide…
Read More » -
CheckMarx Jenkins package compromised by infostealer
Hacker group TeamPCP published a malicious version (2026.5.09) of…
Read More » -
OpenClaw + Claude bring AI podcasts to Spotify
The new "Save to Spotify CLI" tool allows AI…
Read More » -
New Quasar Linux malware stealthily targets software developers
Quasar Linux (QLNX) is a sophisticated new backdoor targeting…
Read More » -
Hackers Exploit Critical LiteLLM Pre-Auth SQLi Flaw
Hackers are actively exploiting a critical pre-authentication SQL injection…
Read More » -
Supply-Chain Attack Targeted Checkmarx and Bitwarden
Checkmarx suffered a supply-chain attack on March 19 via…
Read More » -
GlassWorm malware resurfaces through 73 sleeper OpenVSX extensions
The GlassWorm campaign has deployed 73 sleeper extensions on…
Read More » -
Open source package with 1M monthly downloads stole user credentials
Attackers exploited a vulnerability in a GitHub action workflow…
Read More » -
Hackers Breach EU Commission Via Security Tool Trivy
A major data breach at the European Commission was…
Read More » -
OpenClaw security flaw raises new user concerns
Security experts have long warned about the risks of…
Read More » -
Ollama MLX Support Speeds Up Mac AI Models
The Ollama platform now previews support for Apple's MLX…
Read More » -
Claude Code CLI Source Code Leak via Exposed Map File
Anthropic's proprietary source code for its Claude Code CLI…
Read More » -
Malware hidden in backdoored Telnyx PyPI package
A malicious version of the Telnyx SDK Python package…
Read More » -
Trivy Scanner Compromised in Major Supply-Chain Attack
A supply-chain attack compromised nearly all versions of the…
Read More » -
Invisible Code Supply-Chain Attack Hits GitHub Repositories
A new wave of supply-chain attacks uses invisible Unicode…
Read More » -
PhantomRaven NPM Attack Steals Dev Data in 88 Packages
The PhantomRaven campaign targets the npm registry using malicious…
Read More » -
Sage Shields AI Agents from OS Vulnerabilities
A new open-source security tool called Sage introduces Agent…
Read More »
