DeceptiveDevelopment poisons repos after stealing developer credentials
ESET says the group planted code on npm, PyPI, Packagist, Go modules, and extension stores from April to September 2026.
76
Product
Discord
- Mentions · 7d2
- Mentions · 30d9
- All mentions22
- First seenAug 26, 2026
- Last mentioned2d ago
Timeline
22 articles · newest firstDiscord bot reviews show privacy worries that star ratings hide
Of 183,142 reviews, 8,832 were security and privacy relevant; confession bots exceeded a 50 percent yield.
46
Rust-based CikaBika Bot uses Discord as its command center
A Nim loader and PowerShell UAC bypass try to plant the payload as Edge’s dbghelp.dll.
56
CikaBika Bot RAT Uses Discord for C&C
Darktrace reports CikaBika, a Rust RAT using Discord for C2, delivered by phishing PDFs and LNK loaders.
58
CastleStealer Malware Bypasses Chromium ABE and Adds Remote Command Execution Capabilities
CastleStealer now bypasses Chromium app-bound encryption, runs remote commands, and exfiltrates data over encrypted TCP.
56
Discord Security Bot Double Counter Hacked, Exposing Data of Millions of Users
Double Counter’s Discord bot breach exposed identifiers, IPs, and emails tied to tens of millions of accounts.
83
Malicious npm Packages Steal Browser Passwords, Discord Tokens and Crypto Wallets.
The MALFEX npm campaign ships Overlord RAT and movinlike to steal browser passwords, Discord tokens, and crypto wallets.
71
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
Eight malicious npm packages, downloaded 40,767 times, installed Overlord RAT and a Node.js stealer.
73
Discord Users’ Data Exposed in Security Bot Double Counter Security Breach
A Double Counter Discord bot breach exposed tens of millions of IDs and IPs and about one million emails.
82
Everyone's Packing Up
A blog essay says creators are leaving big platforms for smaller, self-hosted sites.
6
New Infostealer Can Steal Passwords, Cards, Cookies and Wi-Fi Keys From Windows PCs
K7 Labs analyzed a Python infostealer builder that steals Windows browser secrets, cards, cookies, Discord tokens, and Wi-Fi passwords.
48
Python MaaS Infostealer Builder Steals Passwords, Credit Cards and Cookies From 17 Browsers
K7 Labs analyzed a Python malware-as-a-service builder that steals browser passwords, cards, and cookies from 17 Chromium browsers.
49
TWEAKOS Malware Turns Telegram Into a Stealer, C2 Platform and Stolen Account Marketplace
TWEAKOS steals Discord tokens and Telegram sessions, then sells that access through a Telegram bot.
48
CLOSEDQUORUM, the malware that asks four AI models what to do next
Cisco Talos says CLOSEDQUORUM lets four commercial AI models vote on credential and wallet theft.
74
This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move
Talos analyzed CLOSEDQUORUM, Windows malware that lets up to four AI models vote on its next action.
68
Researchers Find Malware That Uses AI Models Instead of Human Hackers for Control
Researchers find CLOSEDQUORUM, a Windows malware that uses commercial LLMs as an autonomous decision engine for post-compromise actions like credential theft.
65
Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto
North Korea's Contagious Interview campaign hit 30,000 devices and stole about $10.71 million in crypto.
82
Hackers Use Microsoft-Signed Driver to Disable 145 Security Tools and Steal Passwords
Hackers are using a Microsoft-signed driver to disable 145 security tools and steal passwords via fake LastPass download pages on GitHub.
78
New Remus Infostealer Steals OpenAI and Anthropic API Tokens, Passwords and Crypto Wallets
SpyCloud Labs details Remus, a Windows infostealer harvesting AI platform API tokens, passwords, 2FA artifacts, and crypto wallets.
68
North Korean IT Workers Pay People to Sit Through Job Interviews While They Control the Computer
Silent Push found North Korean IT workers recruiting on-camera proxies for job interviews while remotely controlling the computer, defeating identity and location checks.
60
Fake GTA 6 Installer Steals Browser Passwords, Discord Tokens and Crypto Data From Gamers
Huntress found fake GTA 6 installer ISOs spreading NJRAT, DCRAT, Mercurial Grabber and a Chaos ransomware wiper that steals credentials.
47
88 ID Verification Breaches Show the Cost of Collecting Identity Data
A report catalogs 88 ID-verification breaches since 2011 exposing at least 2.15 billion records, with 41 incidents leaking irreplaceable biometric data and documents.
68
Related CVEs
by mentions- CVE-2026-6303011%9.8WordPress Core Route Confusion (wp2shell) Enables SQL Injection to RCE
- CVE-2026-601375%5.9WordPress Core SQL Injection via WP_Query author__not_in (CVE-2026-60137)
Appears with
- Telegramproduct · 6
- Firefoxproduct · 5
- Windowsproduct · 5
- MetaMaskproduct · 4
- Microsoftvendor · 4
- Microsoft Edgeproduct · 4
- DeepSeekai model · 3
- Robloxproduct · 3
- Chromeproduct · 3
- Mistralai model · 3
- npmproduct · 3
- Cisco Talosorganization · 3
- CLOSEDQUORUMmalware · 3
- Qwenai model · 3
- Exodusproduct · 3
- Googlevendor · 3
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.