Connecting the dots between recently active cryptominersCisco Talos·Dec 18, 16:33 UTC · Dec 18, 2018Malware42
Malware Found in Laravel-Lang Composer Packages After Git Tag Poisoning AttackSecurity Affairs·May 26, 11:20 UTC · May 26, 2026Malware42
Hackers Abusing GitHub to Evade Detection and Control Compromised HostsThe Hacker News·Dec 21, 03:24 UTC · Dec 21, 2023Malware42
Hackers backdoor PHP source code after internal repo hackThe Record·Jan 26, 00:00 UTC · Jan 26, 2023Malware42
Sophos uncovers AI-powered malware lab built for EDR evasionHelp Net Security·Jun 2, 00:00 UTC · Jun 2, 2026Malware142
TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIOThe Hacker News·May 25, 05:59 UTC · May 25, 2026Malware42
Laravel-Lang PHP Packages Compromised to Deliver CrossThe Hacker News·May 24, 08:14 UTC · May 24, 2026Malware42
North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for CrossThe Hacker News·Mar 3, 06:20 UTC · Mar 3, 2026Malware42
Self-spreading npm malware targets developers in new supply chain attackHelp Net Security·Feb 24, 00:00 UTC · Feb 24, 2026Malware42
Most wanted malware in January 2019: A new threat speaks upHelp Net Security·Feb 14, 00:00 UTC · Feb 14, 2019Malware in the wildCVE-2017-7269CVE-2014-0160CVE-2014-034660
SkillCloak Lets Malicious AI Agent Skills Evade Static Scanners with SelfThe Hacker News·Jul 6, 06:55 UTC · Jul 6, 2026Malware42
North Korean Hackers Are Turning Developer Tools Into Malware Delivery ChannelsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Malware42
CISA Admin Leaked AWS GovCloud Keys on GithubKrebs on Security·May 20, 23:14 UTC · May 20, 2026Malware42
Backdoor found in widely used Linux utility targets encrypted SSH connectionsArs Technica · Security·Mar 29, 18:50 UTC · Mar 29, 2024Malware42
Attackers tried to insert backdoor into PHP source codeHelp Net Security·Apr 8, 12:12 UTC · Apr 8, 2021Malware42
Xwo Malware scans the Internet for Exposed Services, Default PasswordsSecurity Affairs·Apr 5, 14:12 UTC · Apr 5, 2019Malware42
QuickFox Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Windows InstallerThe Hacker News·Aug 5, 05:49 UTC · Aug 5, 2026Malware42
Two Compromised joyfill npm Packages Run RAT When Imported Into Node.jsThe Hacker News·Aug 4, 05:21 UTC · Aug 4, 2026Malware142
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python InfostealerThe Hacker News·Jul 1, 10:25 UTC · Jul 1, 2026Malware142
Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RATThe Hacker News·Jun 23, 09:01 UTC · Jun 23, 2026Malware42
ShapedPlugin Supply Chain Attack Backdoors Pro Plugin UpdatesSecurity Affairs·Jun 23, 08:23 UTC · Jun 23, 2026Malware42
How cybersecurity firms took down Glassworm botnet in one shotSecurity Affairs·May 27, 11:35 UTC · May 27, 2026Malware42
Quasar Linux RAT Steals Developer Credentials for Software Supply Chain CompromiseThe Hacker News·May 8, 11:00 UTC · May 8, 2026Malware42
An AI gateway designed to steal your dataKaspersky Securelist·Mar 27, 13:36 UTC · Mar 27, 2026Malware42
TeamPCP strikes again: Backdoored Telnyx PyPI package delivers malwareHelp Net Security·Mar 27, 00:00 UTC · Mar 27, 2026Malware42
GlassWorm Returns with 24 Malicious Extensions Impersonating Popular Developer ToolsThe Hacker News·Dec 3, 06:36 UTC · Dec 3, 2025Malware42
New Tomiris tools and techniques: multiple reverse shells, Havoc, AdaptixC2Kaspersky Securelist·Nov 28, 07:00 UTC · Nov 28, 2025Malware142
Self-Spreading 'GlassWorm' Infects VS Code Extensions in Widespread Supply Chain AttackThe Hacker News·Oct 24, 07:00 UTC · Oct 24, 2025Malware42
PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud EnvironmentsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025Malware142
Malicious PyPI Packages Exploit Instagram and TikTok APIs to Validate User AccountsThe Hacker News·May 20, 05:49 UTC · May 20, 2025Malware142
Hackers Use Fake GlobalProtect VPN Software in New WikiLoader Malware AttackThe Hacker News·Sep 4, 05:31 UTC · Sep 4, 2024Malware42
Palo Alto’s GlobalProtect VPN Spoofed to Deliver New Malware VariantInfosecurity Magazine·Sep 3, 14:30 UTC · Sep 3, 2024Malware42
North Korean Hackers Target Developers with Malicious npm PackagesThe Hacker News·Aug 31, 15:12 UTC · Aug 31, 2024Malware42
Kaspersky analysis of the backdoor in XZKaspersky Securelist·Apr 12, 08:00 UTC · Apr 12, 2024Malware42
Expert found a backdoor in XZ tools used many Linux distributionsSecurity Affairs·Mar 30, 19:50 UTC · Mar 30, 2024MalwareCVE-2024-309447
Qubitstrike Targets Jupyter Notebooks with Crypto Mining and Rootkit CampaignThe Hacker News·Oct 18, 11:42 UTC · Oct 18, 2023Malware42
North Korean Hackers Suspected in New Wave of Malicious npm PackagesThe Hacker News·Aug 17, 13:38 UTC · Aug 17, 2023Malware42
TeamTNT's Silentbob Botnet Infecting 196 Hosts in Cloud Attack CampaignThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2023Malware42
Prominent cryptocurrency exchange infected with previously unseen Mac malwareArs Technica · Security·Jun 27, 13:53 UTC · Jun 27, 2023Malware42
Tool to find the Operation Triangulation tracesKaspersky Securelist·Jun 2, 12:16 UTC · Jun 2, 2023Malware42