All Related Articles for: Malicious dYdX Packages Drain User Wallets
-
Microsoft hit again by credential-stealing malware in software packages
Microsoft's compromised open source packages on GitHub contained credential-stealing…
Read More » -
AgentGG: Open-Source AI-Powered SAST Scanner
AgentGG is an open-source SAST scanner that uses AI…
Read More » -
Red Hat npm packages hit by new Mini Shai-Hulud malware wave
On June 1, 2026, over 30 npm packages tied…
Read More » -
Red Hat NPM channel hit by backdoored packages
A supply-chain attack breached official Red Hat NPM accounts…
Read More » -
Hackers Poison Open Source Code at Unprecedented Scale
A cybercriminal group called TeamPCP has transformed software supply…
Read More » -
GitHub Confirms 3,800 Repos Breached via Malicious VSCode Extension
A GitHub employee's device was compromised after installing a…
Read More » -
CVE Lite CLI: Open-Source Dependency Vulnerability Scanner
CVE Lite CLI, now an OWASP Incubator Project, shifts…
Read More » -
CheckMarx Jenkins package compromised by infostealer
Hacker group TeamPCP published a malicious version (2026.5.09) of…
Read More » -
Critical vm2 sandbox flaw enables host code execution
A critical sandbox escape vulnerability (CVE-2026-26956) has been discovered…
Read More » -
New Quasar Linux malware stealthily targets software developers
Quasar Linux (QLNX) is a sophisticated new backdoor targeting…
Read More » -
Supply-Chain Attack Targeted Checkmarx and Bitwarden
Checkmarx suffered a supply-chain attack on March 19 via…
Read More » -
GlassWorm malware resurfaces through 73 sleeper OpenVSX extensions
The GlassWorm campaign has deployed 73 sleeper extensions on…
Read More » -
Open-Source Tool Reveals CI/CD Pipeline Attack Methods
Boost Security has launched SmokedMeat, an open-source framework that…
Read More » -
Axios npm Hack, FortiClient EMS Bugs Exploited
The financial sector warns that generative AI has made…
Read More » -
Software Supply Chain Attacks Cause Data Breaches
A series of software supply chain attacks on popular…
Read More » -
AI’s Growing Role in Open-Source Development
The open-source ecosystem is critically dependent on individual maintainers,…
Read More » -
TeamPCP Ransomware Shift Raises Threat Despite Slower Attacks
TeamPCP has not retreated but has strategically paused its…
Read More » -
Claude Code CLI Source Code Leak via Exposed Map File
Anthropic's proprietary source code for its Claude Code CLI…
Read More » -
NIST Updates DNS Security, PyPI Packages Compromised
The cybersecurity threat landscape is dominated by active exploits,…
Read More » -
Malware hidden in backdoored Telnyx PyPI package
A malicious version of the Telnyx SDK Python package…
Read More »
