Google Uncovers PROMPTFLUX Malware That Uses Gemini AI to Rewrite Its Code HourlyThe Hacker News·Nov 6, 04:37 UTC · Nov 6, 2025Malware42
Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API TokensThe Hacker News·Feb 23, 10:20 UTC · Feb 23, 2026Malware142
Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain AttackThe Hacker News·Oct 24, 07:00 UTC · Oct 24, 2025Malware42
ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google APIThe Hacker News·Jul 2, 15:49 UTC · Jul 2, 2026Malware42
Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer AccountThe Hacker News·May 21, 05:56 UTC · May 21, 2026Malware42
Cybercriminals Are Using Legit Cloud Monitoring Tools As BackdoorThe Hacker News·Sep 9, 08:23 UTC · Sep 9, 2020Malware42
Microsoft Detects "SesameOp" Backdoor Using OpenAI's API as a Stealth Command ChannelThe Hacker News·Nov 4, 14:16 UTC · Nov 4, 2025Malware42
Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data TheftThe Hacker News·Mar 9, 14:35 UTC · Mar 9, 2026Malware42
PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and LinuxThe Hacker News·May 7, 09:20 UTC · May 7, 2026Malware42
Experts Identify Fully-Featured Info Stealer and Trojan in Python Package on PyPIThe Hacker News·Mar 6, 07:41 UTC · Mar 6, 2023Malware42
Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential StealerThe Hacker News·May 25, 09:00 UTC · May 25, 2026Malware142
CERT-UA Warns of HTA-Delivered C# Malware Attacks Using Court Summons LuresThe Hacker News·Aug 8, 10:45 UTC · Aug 8, 2025MalwareCVE-2023-3883147
Fake Moltbot AI Coding Assistant on VS Code Marketplace Drops MalwareThe Hacker News·Jan 29, 10:32 UTC · Jan 29, 2026Malware42
Malicious NuGet Package Targeting .NET Developers with SeroXen RATThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2023Malware42
Cybercriminals Use Excel Exploit to Spread Fileless Remcos RAT MalwareThe Hacker News·Nov 11, 06:13 UTC · Nov 11, 2024MalwareCVE-2017-019947
27 Malicious PyPI Packages with Thousands of Downloads Found Targeting IT ExpertsThe Hacker News·Nov 17, 12:15 UTC · Nov 17, 2023Malware42
North Korean Hackers Are Turning Developer Tools Into Malware Delivery ChannelsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Malware42
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python InfostealerThe Hacker News·Jul 1, 10:25 UTC · Jul 1, 2026Malware142
Beware of 'Coronavirus Maps' – It's a malware infecting PCs to steal passwordsThe Hacker News·Nov 30, 06:24 UTC · Nov 30, 2021Malware42
“Red October”. Detailed Malware Description 2. Second Stage of AttackKaspersky Securelist·Jan 17, 16:08 UTC · Jan 17, 2013Malware42
Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code ExtensionThe Hacker News·Jul 10, 10:33 UTC · Jul 10, 2025Malware142
FlawedAmmyy Leveraging Undetected XLM Macros as an Infection VehicleSecurity Affairs·Mar 2, 18:46 UTC · Mar 2, 2019Malware in the wild157
Hiding in plain sight: PhantomLance walks into a marketKaspersky Securelist·Apr 28, 15:00 UTC · Apr 28, 2020Malware42
The JavaScript Supply Chain Paradox: SRI, CSP and Trust in Third Party LibrariesTroy Hunt·Feb 12, 07:59 UTC · Feb 12, 2018Malware42
High-profile malware and targeted attacks in Q1 2023Kaspersky Securelist·Jun 7, 08:00 UTC · Jun 7, 2023Malware42