TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIOThe Hacker News·May 25, 05:59 UTC · May 25, 2026Malware42
TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain AttackThe Hacker News·May 15, 00:00 UTC · May 15, 2026Malware42
Android banking Trojan TrickMo evolves using TON network for C2Security Affairs·May 12, 06:53 UTC · May 12, 2026Malware30
Quasar Linux RAT Steals Developer Credentials for Software Supply Chain CompromiseThe Hacker News·May 8, 11:00 UTC · May 8, 2026Malware42
New linux_avp malware hits eCommerce sitesSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Malware42
Claude Code Source Leaked via npm Packaging Error, Anthropic ConfirmsThe Hacker News·Apr 3, 08:38 UTC · Apr 3, 2026Malware142
Hackers Hijack Axios npm Package to Spread RATsInfosecurity Magazine·Apr 1, 09:00 UTC · Apr 1, 2026Malware42
A Top Google Search Result for Claude Plugins Was Planted by Hackers404 Media·Mar 24, 13:35 UTC · Mar 24, 2026Malware42
Malicious npm Package Posing as OpenClaw Installer Deploys RAT, Steals macOS CredentialsThe Hacker News·Mar 10, 14:30 UTC · Mar 10, 2026Malware30
Malicious Go Crypto Module Steals Passwords, Deploys Rekoobe BackdoorThe Hacker News·Feb 28, 04:41 UTC · Feb 28, 2026Malware42
Microsoft Discloses DNS-Based ClickFix Attack Using Nslookup for Malware StagingThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Malware30
Brutus: Open-source credential testing tool for offensive securityHelp Net Security·Feb 13, 00:00 UTC · Feb 13, 2026Malware42
ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More StoriesThe Hacker News·Jan 10, 14:25 UTC · Jan 10, 2026MalwareCVE-2025-59295CVE-2025-10294CVE-2025-5923060
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & MoreThe Hacker News·Nov 24, 12:32 UTC · Nov 24, 2025Malware in the wildCVE-2025-58034CVE-2025-64446CVE-2025-13223+12 CVEs60
AI-Enabled Malware Now Actively Deployed, Says GoogleInfosecurity Magazine·Nov 6, 09:45 UTC · Nov 6, 2025Malware42
Google uncovers malware using LLMs to operate and evade detectionHelp Net Security·Nov 5, 00:00 UTC · Nov 5, 2025Malware142
PhantomRaven Malware Found in 126 npm Packages Stealing GitHub Tokens From DevsThe Hacker News·Oct 30, 11:46 UTC · Oct 30, 2025Malware42
⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, ZeroThe Hacker News·Oct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-2104360
GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain SecurityThe Hacker News·Sep 25, 07:40 UTC · Sep 25, 2025Malware42
Toptal GitHub Breach Exposes 73 Repositories and Injects Malware into 10 npm PackagesThe Hacker News·Aug 6, 10:50 UTC · Aug 6, 2025Malware42
Vietnamese Hackers Use PXA Stealer, Hit 4,000 IPs and Steal 200,000 Passwords GloballyThe Hacker News·Aug 4, 13:58 UTC · Aug 4, 2025Malware30
GhostContainer backdoor for Exchange serversKaspersky Securelist·Jul 17, 08:00 UTC · Jul 17, 2025MalwareCVE-2020-068847
Cisco removed the backdoor account from its Unified Communications ManagerSecurity Affairs·Jul 2, 19:13 UTC · Jul 2, 2025MalwareCVE-2025-2030947
New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions GloballyThe Hacker News·Jun 9, 16:37 UTC · Jun 9, 2025Malware42
New Self-Spreading Malware Infects Docker Containers to Mine Dero CryptocurrencyThe Hacker News·May 27, 16:23 UTC · May 27, 2025Malware42
Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive DataThe Hacker News·Apr 7, 06:40 UTC · Apr 7, 2025Malware42
U.S. Defense Warns of 3 New Malware Used by North Korean HackersThe Hacker News·Feb 12, 05:13 UTC · Feb 12, 2025Malware42
Tsurugi Linux: Tailoring user experience for digital forensics and OSINT investigationsHelp Net Security·Apr 9, 17:28 UTC · Apr 9, 2024Malware30
What we know about the xz Utils backdoor that almost infected the worldArs Technica · Security·Apr 1, 06:55 UTC · Apr 1, 2024Malware55
PyPI halted new users and projects while it fended off supplyArs Technica · Security·Mar 28, 18:50 UTC · Mar 28, 2024Malware42
MobSF: Open-source security research platform for mobile appsHelp Net Security·Mar 25, 07:14 UTC · Mar 25, 2024Malware30
Linux Malware Campaign “Migo” Targets Redis For CryptominingInfosecurity Magazine·Feb 20, 17:00 UTC · Feb 20, 2024Malware42
Experts Warn of Impending TeamTNT Docker AttacksInfosecurity Magazine·Jul 6, 10:30 UTC · Jul 6, 2023Malware42
SonicWall SMA appliance infected by a custom malwareSecurity Affairs·Mar 9, 19:22 UTC · Mar 9, 2023Malware42
DeathStalker targets legal entities with new Janicab variantKaspersky Securelist·Dec 9, 09:30 UTC · Dec 9, 2022Malware30
Nearly 50,000 IPs compromised in Kubernetes clusters by TeamTNTSecurity Affairs·May 26, 21:29 UTC · May 26, 2021Malware30
TeamTNT group uses Hildegard Malware to target Kubernetes SystemsSecurity Affairs·Feb 5, 16:44 UTC · Feb 5, 2021Malware42
TeamTNT botnet now steals Docker API and AWS credentialsSecurity Affairs·Jan 10, 10:22 UTC · Jan 10, 2021Malware142