GitHub besieged by millions of malicious repositories in ongoing attackArs Technica · Security·Feb 28, 22:12 UTC · Feb 28, 2024Malware42
North Korean Hackers Pose as Job Recruiters and Seekers in Malware CampaignsThe Hacker News·Feb 26, 11:56 UTC · Feb 26, 2024Malware42
Malicious npm Packages Used to Target GitHub Developer SSH KeysInfosecurity Magazine·Jan 23, 17:00 UTC · Jan 23, 2024Malware142
Crypto Hardware Wallet Ledger's Supply Chain Breach Results in $600,000 TheftThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2023Malware in the wild57
Highly invasive backdoor snuck into open source packages targets developersArs Technica · Security·Nov 8, 18:27 UTC · Nov 8, 2023Malware42
48 Malicious npm Packages Found Deploying Reverse Shells on Developer SystemsThe Hacker News·Nov 6, 16:38 UTC · Nov 6, 2023Malware155
Stealthy npm Malware Exposes Developer DataInfosecurity Magazine·Aug 4, 17:30 UTC · Aug 4, 2023Malware30
Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat MalwareThe Hacker News·May 19, 12:13 UTC · May 19, 2023Malware142
Hackers Using Trending TikTok 'Invisible Challenge' to Spread MalwareThe Hacker News·Nov 29, 13:18 UTC · Nov 29, 2022Malware42
Researchers Uncover Rust Supply Chain Attack Targeting Cloud CI PipelinesThe Hacker News·May 21, 03:11 UTC · May 21, 2022Malware42
Here's a New Tool That Scans Open-Source Repositories for Malicious PackagesThe Hacker News·May 3, 03:59 UTC · May 3, 2022Malware42
Tens of malicious NPM packages caught hijacking Discord serversSecurity Affairs·Dec 9, 10:49 UTC · Dec 9, 2021Malware42
Over a Dozen Malicious NPM Packages Caught Hijacking Discord ServersThe Hacker News·Dec 9, 07:02 UTC · Dec 9, 2021Malware42
Malicious NPM Packages Caught Running Cryptominer On Windows, Linux, macOS DevicesThe Hacker News·Oct 23, 04:24 UTC · Oct 23, 2021Malware30
760+ malicious packages found typosquatting on RubyGemsHelp Net Security·Apr 17, 00:00 UTC · Apr 17, 2020Malware30
Over 700 Malicious Typosquatted Libraries Found On RubyGems RepositoryThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2020Malware42
Backdoored Ruby gems stole credentials, injected cryptomining codeHelp Net Security·Aug 21, 00:00 UTC · Aug 21, 2019Malware42