Search: “Checkmarx”

46 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 72 Malware 55 Data breach 24 Ransomware 19 Exploit / PoC 17 Threat actor 16 Policy & legal 13 Industry 11 Phishing & fraud 9 AI safety & security 2 AI policy 1 Research 1 AI tools & infra 1 Tools 1

SeverityAll critical 62 high 118 medium 40 low 16 info 6

Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

The Hacker NewsApr 24, 04:35 UTC · Apr 24, 2026Malware

42

PyPI halted new users and projects while it fended off supply

Ars Technica · SecurityMar 28, 18:50 UTC · Mar 28, 2024Malware

42

TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Malware

42

Highly invasive backdoor snuck into open source packages targets developers

Ars Technica · SecurityNov 8, 18:27 UTC · Nov 8, 2023Malware

42

An AI gateway designed to steal your data

Kaspersky SecurelistMar 27, 13:36 UTC · Mar 27, 2026Malware

42

Popular PyPI site for developers temporarily blocks functions due to malware campaign

The RecordMar 28, 19:11 UTC · Mar 28, 2024Malware

42

LofyGang Group Linked to Recent Software Supply Chain Attacks

Infosecurity MagazineOct 7, 18:00 UTC · Oct 7, 2022Malware

42

Dozens of Red Hat packages backdoored through its official NPM channel

Ars Technica · SecurityJun 1, 19:49 UTC · Jun 1, 2026Malware

42

Experts warn of OSS supply chain attacks on the banking sector

Security AffairsJul 24, 09:46 UTC · Jul 24, 2023Malware

42

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

The Hacker NewsJul 29, 03:39 UTC · Jul 29, 2026Malware

42

TeamPCP Backdoors LiteLLM Versions 1.82.7

The Hacker NewsMar 25, 06:43 UTC · Mar 25, 2026Malware

42

Supply Chain Attack Uses Smart Contracts for C2 Ops

Infosecurity MagazineNov 4, 12:00 UTC · Nov 4, 2024Malware

42

Flood of malicious packages results in NPM registry DoS

Help Net SecuritySep 24, 09:54 UTC · Sep 24, 2024Malware

42

Hackers Hijack GitHub Accounts in Supply Chain Attack Affecting Top

The Hacker NewsMar 26, 03:55 UTC · Mar 26, 2024Malware1

42

27 Malicious PyPI Packages with Thousands of Downloads Found Targeting IT Experts

The Hacker NewsNov 17, 12:15 UTC · Nov 17, 2023Malware

42

Hackers Flood NPM with Bogus Packages Causing a DoS Attack

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2023Malware

42

W4SP Stealer Constantly Targeting Python Developers in Ongoing Supply Chain Attack

The Hacker NewsNov 19, 04:11 UTC · Nov 19, 2022Malware

42

Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens

The Hacker NewsFeb 23, 10:20 UTC · Feb 23, 2026Malware1

42

Malware Campaign Uses Ethereum Smart Contracts to Control npm Typosquat Packages

The Hacker NewsNov 5, 05:35 UTC · Nov 5, 2024Malware

42

Malicious PyPI Package Targets macOS to Steal Google Cloud Credentials

The Hacker NewsJul 27, 05:47 UTC · Jul 27, 2024Malware

42

Beware: GitHub's Fake Popularity Scam Tricking Developers into Downloading Malware

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2024Malware

42

Malicious NuGet Package Targeting .NET Developers with SeroXen RAT

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2023Malware

42

Malicious npm Packages Aim to Target Developers for Source Code Theft

The Hacker NewsAug 30, 12:08 UTC · Aug 30, 2023Malware

42

Developer Alert: NPM Packages for Node.js Hiding Dangerous TurkoRat Malware

The Hacker NewsMay 19, 12:13 UTC · May 19, 2023Malware1

42

Hackers Using Trending TikTok 'Invisible Challenge' to Spread Malware

The Hacker NewsNov 29, 13:18 UTC · Nov 29, 2022Malware

42

Ongoing supply chain attack targets Python developers with WASP Stealer

Security AffairsNov 18, 08:24 UTC · Nov 18, 2022Malware1

42

LofyGang Distributed ~200 Malicious NPM Packages to Steal Credit Card Data

The Hacker NewsOct 8, 04:42 UTC · Oct 8, 2022Malware

42

Two Compromised joyfill npm Packages Run RAT When Imported Into Node.js

The Hacker NewsAug 4, 05:21 UTC · Aug 4, 2026Malware1

42

Shai-Hulud worm copycats emerge after source code leak

Security AffairsMay 19, 07:29 UTC · May 19, 2026Malware

42

Widely used Daemon Tools disk app backdoored in monthlong supply

Ars Technica · SecurityMay 5, 19:46 UTC · May 5, 2026Malware

42

⚡ Weekly Recap: Fast16 Malware, XChat Launch, Federal Backdoor, AI Employee Tracking & More

The Hacker NewsApr 28, 07:38 UTC · Apr 28, 2026Malware CVE-2025-20333 CVE-2025-20362 CVE-2026-40372+20 CVEs1

47

Axios npm packages backdoored in supply chain attack

Help Net SecurityMar 31, 00:00 UTC · Mar 31, 2026Malware

42

TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malware

Help Net SecurityMar 27, 00:00 UTC · Mar 27, 2026Malware

42

Self-propagating malware poisons open source software and wipes Iran

Ars Technica · SecurityMar 24, 12:38 UTC · Mar 24, 2026Malware

42

‘CanisterWorm’ Springs Wiper Attack Targeting Iran

Krebs on SecurityMar 23, 19:04 UTC · Mar 23, 2026Malware

42

200+ Trojanized GitHub Repositories Found in Campaign Targeting Gamers and Developers

The Hacker NewsJun 21, 09:10 UTC · Jun 21, 2025Malware

42

Cybercriminals Abuse Stack Overflow to Promote Malicious Python Package

The Hacker NewsJun 11, 06:06 UTC · Jun 11, 2024Malware1

42

New RedLine Stealer Variant Disguised as Game Cheats Using Lua Bytecode for Stealth

The Hacker NewsApr 25, 03:49 UTC · Apr 25, 2024Malware CVE-2024-214131

47

PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers

The Hacker NewsMar 30, 05:08 UTC · Mar 30, 2024Malware

42

Hackers Using Cracked Software on GitHub to Spread RisePro Info Stealer

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2024Malware

42