Injective Labs GitHub Compromise Pushes Wallet-KeyThe Hacker News·Jul 10, 17:54 UTC · Jul 10, 2026Malware42
UAT-7810 continues building ORB networks using new malwareCisco Talos·Jul 7, 10:00 UTC · Jul 7, 2026MalwareCVE-2020-22653CVE-2020-22658CVE-2023-25717+1 CVEs47
China-Linked JDY Botnet Expands to 1,500+ Devices for Cyber ReconnaissanceThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026MalwareCVE-2023-20118CVE-2022-32548CVE-2023-24738+2 CVEs60
Over 400 Arch Linux AUR Packages Hijacked to Deploy Infostealer and eBPF RootkitThe Hacker News·Jun 12, 19:35 UTC · Jun 12, 2026Malware55
JDY Botnet Evolves After KV Takedown, Targets Military NetworksSecurity Affairs·Jun 11, 07:46 UTC · Jun 11, 2026MalwareCVE-2026-3561635
Hades PyPI Attack: 19 Packages Poisoned to AutoThe Hacker News·Jun 9, 10:34 UTC · Jun 9, 2026Malware142
Malware Found in Laravel-Lang Composer Packages After Git Tag Poisoning AttackSecurity Affairs·May 26, 11:20 UTC · May 26, 2026Malware42
Laravel-Lang PHP Packages Compromised to Deliver CrossThe Hacker News·May 24, 08:14 UTC · May 24, 2026Malware42
CloudZ RAT potentially steals OTP messages using Pheno pluginCisco Talos·May 5, 10:00 UTC · May 5, 2026Malware55
Researchers Uncover 73 Fake VS Code Extensions Delivering GlassWorm v2 MalwareThe Hacker News·Apr 28, 04:06 UTC · Apr 28, 2026Malware42
108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 UsersThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Malware42
GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target DevelopersThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Malware42
Malicious Go Crypto Module Steals Passwords, Deploys Rekoobe BackdoorThe Hacker News·Feb 28, 04:41 UTC · Feb 28, 2026Malware42
Shai-Hulud-Like Worm Targets Developers via npm and AI ToolsInfosecurity Magazine·Feb 23, 16:00 UTC · Feb 23, 2026Malware42
Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API TokensThe Hacker News·Feb 23, 10:20 UTC · Feb 23, 2026Malware142
Malicious Chrome Extensions Caught Stealing Business Data, Emails, and Browsing HistoryThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Malware30
Malicious packages for dYdX cryptocurrency exchange empties user walletsArs Technica · Security·Feb 6, 22:16 UTC · Feb 6, 2026Malware42
Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT MalwareThe Hacker News·Feb 6, 08:40 UTC · Feb 6, 2026Malware42
Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux HostsThe Hacker News·Jan 24, 08:06 UTC · Jan 24, 2026Malware42
Researchers Find Malicious VS Code, Go, npm, and Rust Packages Stealing Developer DataThe Hacker News·Jan 20, 10:47 UTC · Jan 20, 2026Malware130
Fake browser crash alerts turn Chrome extension into enterprise backdoorHelp Net Security·Jan 19, 00:00 UTC · Jan 19, 2026Malware42
Friday Squid Blogging: The Chinese Squid-Fishing Fleet off the Argentine CoastSchneier on Security·Jan 9, 22:00 UTC · Jan 9, 2026Malware42
Frogblight banking Trojan targets Android users in TurkeyKaspersky Securelist·Dec 15, 07:00 UTC · Dec 15, 2025Malware30
Contagious Interview campaign expands with 197 npm Ppackages spreading new OtterCookie malwareSecurity Affairs·Nov 30, 01:02 UTC · Nov 30, 2025Malware42
New npm Malware Campaign Redirects Victims to Crypto SitesInfosecurity Magazine·Nov 18, 16:00 UTC · Nov 18, 2025Malware30
10 npm Packages Caught Stealing Developer Credentials on Windows, macOS, and LinuxThe Hacker News·Oct 29, 08:34 UTC · Oct 29, 2025Malware55
⚡ Weekly Recap: iPhone Spyware, Microsoft 0-Day, TokenBreak Hack, AI Data Leaks and MoreThe Hacker News·Oct 28, 08:29 UTC · Oct 28, 2025Malware in the wildCVE-2025-43200CVE-2025-32711CVE-2025-33053+24 CVEs260
Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI CredentialsThe Hacker News·Sep 6, 11:31 UTC · Sep 6, 2025Malware55
In search of riches, hackers plant 4GArs Technica · Security·Jul 30, 22:21 UTC · Jul 30, 2025Malware42
North Korea-linked actors spread XORIndex malware via 67 malicious npm packagesSecurity Affairs·Jul 15, 09:48 UTC · Jul 15, 2025Malware55
North Korean Hackers Flood npm Registry with XORIndex Malware in Ongoing Attack CampaignThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Malware42
Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code ExtensionThe Hacker News·Jul 10, 10:33 UTC · Jul 10, 2025Malware142
PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud EnvironmentsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025Malware142
Donot Team group updates its Windows malware frameworkSecurity Affairs·Jun 2, 20:10 UTC · Jun 2, 2025Malware42
New Malware on PyPI Poses Threat to OpenInfosecurity Magazine·May 19, 16:45 UTC · May 19, 2025Malware42
Malicious Go Modules designed to wipe Linux systemsSecurity Affairs·May 4, 15:09 UTC · May 4, 2025Malware42
JPCERT warns of DslogdRAT malware deployed in Ivanti Connect SecureSecurity Affairs·Apr 25, 17:56 UTC · Apr 25, 2025Malware in the wildCVE-2025-028260
North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm PackagesThe Hacker News·Apr 7, 06:39 UTC · Apr 7, 2025Malware42
New advanced FIN7's Anubis backdoor allows to gain full system control on WindowsSecurity Affairs·Apr 2, 21:38 UTC · Apr 2, 2025Malware42