Search: “Aikido”

39 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 39 Data breach 19 Vulnerability 14 Ransomware 10 Threat actor 9 Exploit / PoC 9 AI safety & security 5 Policy & legal 4 Research 2 Model release 1 Phishing & fraud 1

SeverityAll critical 35 high 58 medium 12 low 2 info 6

Over 950K weekly downloads at risk in ongoing supply chain attack on Gluestack packages

Security AffairsJun 8, 13:35 UTC · Jun 8, 2025Malware

42

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

The Hacker NewsAug 4, 15:03 UTC · Aug 4, 2026Malware1

42

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

The Hacker NewsJul 30, 07:58 UTC · Jul 30, 2026Malware

42

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

The Hacker NewsJun 26, 07:08 UTC · Jun 26, 2026Malware in the wild1

60

Malware Found in Laravel-Lang Composer Packages After Git Tag Poisoning Attack

Security AffairsMay 26, 11:20 UTC · May 26, 2026Malware

42

Attackers hijack Axios npm account to spread RAT malware

Security AffairsMar 31, 18:30 UTC · Mar 31, 2026Malware

42

Self-propagating malware poisons open source software and wipes Iran

Ars Technica · SecurityMar 24, 12:38 UTC · Mar 24, 2026Malware

42

Supply-chain attack using invisible code hits GitHub and other repositories

Ars Technica · SecurityMar 15, 00:00 UTC · Mar 15, 2026Malware

42

Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT Malware

The Hacker NewsFeb 6, 08:40 UTC · Feb 6, 2026Malware

42

The popular xrpl.js Ripple cryptocurrency library was compromised in a supply chain attack

Security AffairsApr 23, 09:39 UTC · Apr 23, 2025Malware

42

ChainDrop Worm Hits 400 npm Packages with Two Billion Monthly Installs

Infosecurity MagazineAug 5, 10:00 UTC · Aug 5, 2026Malware

30

Laravel-Lang PHP Packages Compromised to Deliver Cross

The Hacker NewsMay 24, 08:14 UTC · May 24, 2026Malware

42

GlassWorm evolves with Zig dropper to infect multiple developer tools

Security AffairsApr 11, 16:27 UTC · Apr 11, 2026Malware

42

GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data

The Hacker NewsMar 25, 16:42 UTC · Mar 25, 2026Malware

30

Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper

The Hacker NewsMar 25, 14:32 UTC · Mar 25, 2026Malware CVE-2026-336341

60

‘CanisterWorm’ Springs Wiper Attack Targeting Iran

Krebs on SecurityMar 23, 19:04 UTC · Mar 23, 2026Malware

42

Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm Packages

The Hacker NewsMar 23, 07:53 UTC · Mar 23, 2026Malware

42

Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access Trojan

The Hacker NewsJan 28, 12:14 UTC · Jan 28, 2026Malware

42

Researchers Spot Modified Shai-Hulud Worm Testing Payload on npm Registry

The Hacker NewsJan 1, 10:11 UTC · Jan 1, 2026Malware

42

Supply chain attack targets npm, +2 Billion weekly npm downloads exposed

Security AffairsSep 9, 18:26 UTC · Sep 9, 2025Malware

42

New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally

The Hacker NewsJun 9, 16:37 UTC · Jun 9, 2025Malware

42

Ripple's xrpl.js npm Package Backdoored to Steal Private Keys in Major Supply Chain Attack

The Hacker NewsApr 25, 10:29 UTC · Apr 25, 2025Malware CVE-2025-32965

47

New HalluSquatting Attack Could Trick AI Coding Assistants Into Installing Botnet Malware

The Hacker NewsJul 8, 15:19 UTC · Jul 8, 2026Malware

30

Dozens of Red Hat packages backdoored through its official NPM channel

Ars Technica · SecurityJun 1, 19:49 UTC · Jun 1, 2026Malware

42

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

The Hacker NewsMay 21, 05:56 UTC · May 21, 2026Malware

42

‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supply

CyberScoopMay 12, 21:38 UTC · May 12, 2026Malware1

55

TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files

The Hacker NewsMar 28, 06:25 UTC · Mar 28, 2026Malware

42

TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware

Help Net SecurityMar 27, 00:00 UTC · Mar 27, 2026Malware

42

GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target Developers

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2026Malware

42

Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops Malware

The Hacker NewsJan 29, 10:32 UTC · Jan 29, 2026Malware

42

GlassWorm malware has resurfaced on the Open VSX registry

Security AffairsNov 10, 20:06 UTC · Nov 10, 2025Malware

55

GlassWorm Malware Discovered in Three VS Code Extensions with Thousands of Installs

The Hacker NewsNov 10, 08:51 UTC · Nov 10, 2025Malware

30

Week in review: Actively exploited Windows SMB flaw, trusted OAuth apps turned into cloud backdoors

Help Net SecurityOct 26, 00:00 UTC · Oct 26, 2025Malware in the wildCVE-2025-59287 CVE-2025-61932 CVE-2025-54236+2 CVEs

60

North Korean Hackers Combine BeaverTail and OtterCookie into Advanced JS Malware

The Hacker NewsOct 19, 06:05 UTC · Oct 19, 2025Malware

42

⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, Zero

The Hacker NewsOct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-21043

60

20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack

The Hacker NewsSep 10, 00:27 UTC · Sep 10, 2025Malware

42

Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI Credentials

The Hacker NewsSep 6, 11:31 UTC · Sep 6, 2025Malware

55

Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Malware1

55

Malicious npm Package Leverages Unicode Steganography, Google Calendar as C2 Dropper

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Malware

42