All Related Articles for: Malicious dYdX Packages Drain User Wallets
-
Credential-stealing malware found in AsyncAPI npm packages
Malicious AsyncAPI packages were uploaded to npm via a…
Read More » -
Fake Paysafe, Skrill SDKs on NPM and PyPi steal credentials
Malicious packages on npm and PyPi masquerading as legitimate…
Read More » -
ChocoPoC malware targets researchers using trojanized exploits
Attackers are targeting cybersecurity researchers by hosting trojanized proof-of-concept…
Read More » -
Microsoft Blames North Korea for Mastra AI Supply Chain Attack
North Korean state-sponsored group Sapphire Sleet (also known as…
Read More » -
Microsoft hit again by credential-stealing malware in software packages
Microsoft's compromised open source packages on GitHub contained credential-stealing…
Read More » -
AgentGG: Open-Source AI-Powered SAST Scanner
AgentGG is an open-source SAST scanner that uses AI…
Read More » -
Red Hat npm packages hit by new Mini Shai-Hulud malware wave
On June 1, 2026, over 30 npm packages tied…
Read More » -
Red Hat NPM channel hit by backdoored packages
A supply-chain attack breached official Red Hat NPM accounts…
Read More » -
Hackers Poison Open Source Code at Unprecedented Scale
A cybercriminal group called TeamPCP has transformed software supply…
Read More » -
GitHub Confirms 3,800 Repos Breached via Malicious VSCode Extension
A GitHub employee's device was compromised after installing a…
Read More » -
CVE Lite CLI: Open-Source Dependency Vulnerability Scanner
CVE Lite CLI, now an OWASP Incubator Project, shifts…
Read More » -
CheckMarx Jenkins package compromised by infostealer
Hacker group TeamPCP published a malicious version (2026.5.09) of…
Read More » -
Critical vm2 sandbox flaw enables host code execution
A critical sandbox escape vulnerability (CVE-2026-26956) has been discovered…
Read More » -
New Quasar Linux malware stealthily targets software developers
Quasar Linux (QLNX) is a sophisticated new backdoor targeting…
Read More » -
Supply-Chain Attack Targeted Checkmarx and Bitwarden
Checkmarx suffered a supply-chain attack on March 19 via…
Read More » -
GlassWorm malware resurfaces through 73 sleeper OpenVSX extensions
The GlassWorm campaign has deployed 73 sleeper extensions on…
Read More » -
Open-Source Tool Reveals CI/CD Pipeline Attack Methods
Boost Security has launched SmokedMeat, an open-source framework that…
Read More » -
Axios npm Hack, FortiClient EMS Bugs Exploited
The financial sector warns that generative AI has made…
Read More » -
Software Supply Chain Attacks Cause Data Breaches
A series of software supply chain attacks on popular…
Read More » -
AI’s Growing Role in Open-Source Development
The open-source ecosystem is critically dependent on individual maintainers,…
Read More »