New NadMesh Botnet Hunts Exposed AI Services for Cloud Keys and Kubernetes TokensThe Hacker News·Jul 17, 17:12 UTC · Jul 17, 2026MalwareCVE-2026-39987CVE-2026-41176CVE-2022-22947+1 CVEs47
Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API TokensThe Hacker News·Feb 23, 10:20 UTC · Feb 23, 2026Malware142
Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply ChainThe Hacker News·Apr 24, 04:35 UTC · Apr 24, 2026Malware42
Chrome Extension Turns Malicious After Ownership Transfer, Enabling Code Injection and Data TheftThe Hacker News·Mar 9, 14:35 UTC · Mar 9, 2026Malware42
Self-spreading npm malware targets developers in new supply chain attackHelp Net Security·Feb 24, 00:00 UTC · Feb 24, 2026Malware42
Shai-Hulud-Like Worm Targets Developers via npm and AI ToolsInfosecurity Magazine·Feb 23, 16:00 UTC · Feb 23, 2026Malware42
PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud EnvironmentsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025Malware142
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RATThe Hacker News·Jul 29, 03:39 UTC · Jul 29, 2026Malware42
Sophos uncovers AI-powered malware lab built for EDR evasionHelp Net Security·Jun 2, 00:00 UTC · Jun 2, 2026Malware142
GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target DevelopersThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Malware42
ThreatsDay Bulletin: AI Tools in Malware, Botnets, GDI Flaws, Election Attacks & MoreThe Hacker News·Nov 7, 11:19 UTC · Nov 7, 2025MalwareCVE-2025-30388CVE-2025-53766CVE-2025-4798447
Chinese AI Villager Pen Testing Tool Hits 11,000 PyPI DownloadsInfosecurity Magazine·Sep 16, 16:00 UTC · Sep 16, 2025Malware in the wild57