The Tsundere botnet uses the Ethereum blockchain to infect its targetsKaspersky Securelist·Nov 21, 08:21 UTC · Nov 21, 2025Malware42
Divergent: "Fileless" NodeJS Malware Burrows Deep Within the HostCisco Talos·Sep 26, 20:07 UTC · Sep 26, 2019Malware30
NPM packages found containing the TurkoRat infostealerSecurity Affairs·May 19, 13:27 UTC · May 19, 2023Malware42
Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat MalwareThe Hacker News·May 19, 12:13 UTC · May 19, 2023Malware142
Malicious npm Package nodejs-smtp Mimics Nodemailer, Targets Atomic and Exodus WalletsThe Hacker News·Sep 2, 04:40 UTC · Sep 2, 2025Malware30
Malicious npm Package Masquerades as Popular Email LibraryInfosecurity Magazine·Sep 2, 16:45 UTC · Sep 2, 2025Malware30
An AI gateway designed to steal your dataKaspersky Securelist·Mar 27, 13:36 UTC · Mar 27, 2026Malware42
Coyote: A multi-stage banking Trojan abusing the Squirrel installerKaspersky Securelist·Feb 8, 13:02 UTC · Feb 8, 2024Malware30
MageCart: now with tripwireSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Malware30
Malicious packages in the NPM designed for highlySecurity Affairs·Aug 4, 12:59 UTC · Aug 4, 2023Malware30
PyPI Repository Under Attack: User Sign-Ups and Package Uploads Temporarily HaltedThe Hacker News·May 23, 06:19 UTC · May 23, 2023Malware42
Malicious NPM Package Caught Stealing Users' Saved Passwords From BrowsersThe Hacker News·Jul 23, 04:29 UTC · Jul 23, 2021Malware42
AI developers targeted via trojanized GitHub repositoriesHelp Net Security·Aug 4, 00:00 UTC · Aug 4, 2026Malware130
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & MoreThe Hacker News·Nov 24, 12:32 UTC · Nov 24, 2025Malware in the wildCVE-2025-58034CVE-2025-64446CVE-2025-13223+12 CVEs60
Toptal GitHub Breach Exposes 73 Repositories and Injects Malware into 10 npm PackagesThe Hacker News·Aug 6, 10:50 UTC · Aug 6, 2025Malware42
⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & MoreThe Hacker News·Aug 5, 04:38 UTC · Aug 5, 2025Malware in the wildCVE-2025-40596CVE-2025-40597CVE-2025-40598+8 CVEs60
Here’s how carefully concealed backdoor in fake AWS files escaped mainstream noticeArs Technica · Security·Jul 15, 00:00 UTC · Jul 15, 2024Malware55
Malware report Q1 2024Kaspersky Securelist·Jun 3, 10:00 UTC · Jun 3, 2024MalwareCVE-2023-38606CVE-2023-3243447
Financial threat report 2023: phishing, PC and mobile malwareKaspersky Securelist·May 6, 08:30 UTC · May 6, 2024Malware30
DogeRAT Malware Impersonates BFSI, Entertainment, EInfosecurity Magazine·May 30, 16:30 UTC · May 30, 2023Malware30
Out of the blue: Surviving an 18-hour, 39M-request DDoS attackHelp Net Security·Nov 22, 00:00 UTC · Nov 22, 2022Malware in the wild57
Attackers leveraging Dark Utilities "C2aaS" platform in malware campaignsCisco Talos·Aug 4, 12:00 UTC · Aug 4, 2022Malware30
Chaes Banking Trojan Hijacks Chrome Browser with Malicious ExtensionsThe Hacker News·Jan 27, 12:37 UTC · Jan 27, 2022Malware42
Gootkit RAT Using SEO to Distribute Malware Through Compromised SitesThe Hacker News·Mar 2, 08:52 UTC · Mar 2, 2021Malware42
Gootkit delivery platform Gootloader used to deliver additional payloadsSecurity Affairs·Mar 1, 22:15 UTC · Mar 1, 2021Malware42
Cybaze-Yoroi ZLAB revealed the hidden link between Gootkit and AZORultSecurity Affairs·Feb 12, 18:16 UTC · Feb 12, 2019Malware30