EU Offering Bug Bounties on Critical Open-Source SoftwareSchneier on Security·Jan 27, 14:38 UTC · Jan 27, 2020Malware55
What closed-source software developers can learn from their open-source counterpartsHelp Net Security·Jun 1, 12:28 UTC · Jun 1, 2023Malware30
How GitHub untangled itself from the ‘Octopus’ malware that infected 26 software projectsCyberScoop·May 29, 19:51 UTC · May 29, 2020Malware in the wild160
Malicious package with AdaptixC2 framework agent found in npm registryKaspersky Securelist·Oct 17, 10:00 UTC · Oct 17, 2025Malware55
"Kekw" Malware in Python Packages Could Steal Data and Hijack CryptoInfosecurity Magazine·May 5, 16:30 UTC · May 5, 2023Malware42
XZ Utils backdoor update: Which Linux distros are affected and what can you do?Help Net Security·Apr 8, 13:26 UTC · Apr 8, 2024MalwareCVE-2024-309447
Emotet Tops List of July's Most Widely Used MalwareInfosecurity Magazine·Aug 10, 15:00 UTC · Aug 10, 2022Malware42
‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supplyCyberScoop·May 12, 21:38 UTC · May 12, 2026Malware155
CrowdStrike, Google Take Down Glassworm BotnetInfosecurity Magazine·May 27, 14:00 UTC · May 27, 2026Malware42
The Ventir Trojan: assemble your MacOS spyKaspersky Securelist·Oct 16, 14:00 UTC · Oct 16, 2014Malware42
Over a Dozen Malicious NPM Packages Caught Hijacking Discord ServersThe Hacker News·Dec 9, 07:02 UTC · Dec 9, 2021Malware42
Here's a New Tool That Scans Open-Source Repositories for Malicious PackagesThe Hacker News·May 3, 03:59 UTC · May 3, 2022Malware42
Software supply chain attacks are getting easierHelp Net Security·Jan 24, 00:00 UTC · Jan 24, 2024Malware55
CrowdStrike disrupts Glassworm botnet that preyed on openCyberScoop·May 27, 14:16 UTC · May 27, 2026Malware in the wild160
GodLoader Malware Infects Thousands via Game Development ToolsInfosecurity Magazine·Nov 28, 16:30 UTC · Nov 28, 2024Malware155
Attackers target Apache Hadoop and Flink to deliver cryptominersSecurity Affairs·Jan 15, 08:36 UTC · Jan 15, 2024Malware30
Malicious PyPI Package Exposes Crypto Wallets to Infostealer CodeInfosecurity Magazine·Nov 28, 17:15 UTC · Nov 28, 2024Malware55
New open-source infostealer, and reflections on 2023 so farCisco Talos·Aug 31, 18:00 UTC · Aug 31, 2023Malware55
ISPs inside Turkey and Egypt spread FinFisher spyware in massive espionage campaignCyberScoop·Mar 9, 14:36 UTC · Mar 9, 2018Malware42
Beware: GitHub's Fake Popularity Scam Tricking Developers into Downloading MalwareThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2024Malware42
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and MoreThe Hacker News·Jun 29, 14:42 UTC · Jun 29, 2026Malware in the wildCVE-2026-43503CVE-2026-12569CVE-2026-47729+19 CVEs60
Linux devices are under attack by a never-beforeArs Technica · Security·Jan 10, 16:12 UTC · Jan 10, 2024Malware42
Silver Fox Exploits Microsoft-Signed WatchDog Driver to Deploy ValleyRAT MalwareThe Hacker News·Sep 3, 09:16 UTC · Sep 3, 2025Malware42
Malicious Software Packages Found On Arch Linux User RepositoryThe Hacker News·Jun 12, 19:19 UTC · Jun 12, 2026Malware30
Pro-Ukraine ‘Protestware’ Pushes Antiwar Ads, Geo-Targeted MalwareKrebs on Security·Mar 17, 23:44 UTC · Mar 17, 2022Malware30
North Korean Hackers Target Energy and Aerospace Industries with New MISTPEN MalwareThe Hacker News·Sep 19, 03:06 UTC · Sep 19, 2024Malware42
⚡ Weekly Recap: iOS Zero-Days, 4Chan Breach, NTLM Exploits, WhatsApp Spyware & MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025Malware in the wildCVE-2025-24054CVE-2024-43451CVE-2025-31200+7 CVEs160
Malicious Ads Targeting Chinese Users with Fake Notepad++ and VNote InstallersThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2024Malware42
Npm Trojan Bypasses UAC, Installs AnyDesk with "Oscompatible" PackageThe Hacker News·Jan 19, 07:42 UTC · Jan 19, 2024Malware55
New Linux Malware Exploits SambaCry Flaw to Silently Backdoor NAS DevicesThe Hacker News·Jul 19, 08:23 UTC · Jul 19, 2017MalwareCVE-2017-749460
Malicious Obfuscated NPM Package Disguised as an Ethereum Tool Deploys Quasar RATThe Hacker News·Jan 3, 04:52 UTC · Jan 3, 2025Malware142
North Korean-linked hackers were caught experimenting with new macOS malwareCyberScoop·Nov 12, 14:10 UTC · Nov 12, 2024Malware in the wild60
Dok Mac malware intercepts victims' web traffic, installs backdoorHelp Net Security·Oct 15, 09:22 UTC · Oct 15, 2018Malware55
Malware targeting San Francisco transit may have been in wild at least 2 months, research showsCyberScoop·Nov 28, 23:14 UTC · Nov 28, 2016Malware in the wild60
CowerSnail — Windows Backdoor from the Creators of SambaCry Linux MalwareThe Hacker News·Jul 27, 11:40 UTC · Jul 27, 2017MalwareCVE-2017-749460
Hackers Spread BIOPASS Malware via Chinese Online Gambling SitesThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2021Malware42
BeaverTail Malware Resurfaces in Malicious npm Packages Targeting DevelopersThe Hacker News·Oct 28, 17:12 UTC · Oct 28, 2024Malware42
3CX Breach Was a Double Supply Chain CompromiseKrebs on Security·Apr 21, 02:22 UTC · Apr 21, 2023Malware42
China-linked Winnti APT targets South Korean Gaming firmSecurity Affairs·Apr 22, 07:43 UTC · Apr 22, 2020Malware42