PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and BunSecurity Affairs·Jan 28, 08:43 UTC · Jan 28, 2026Exploit / PoC160
SAP-Related npm Packages Compromised in CredentialThe Hacker News·Apr 30, 16:39 UTC · Apr 30, 2026Data breach60
Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source CodeThe Hacker News·Jan 26, 16:53 UTC · Jan 26, 2026Exploit / PoCCVE-2025-69264CVE-2025-6926360
Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn StealerThe Hacker News·Jun 30, 11:18 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-48558260
SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)Help Net Security·Jun 30, 00:00 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-48558160
Security Affairs newsletter Round 561 by Pierluigi PaganiniSecurity Affairs·Feb 2, 09:39 UTC · Feb 2, 2026Data breach in the wildCVE-2026-24858CVE-2025-40551CVE-2025-808860
Shai-Hulud v2 Spreads From npm to Maven, as Campaign Exposes Thousands of SecretsThe Hacker News·Nov 27, 03:43 UTC · Nov 27, 2025Threat actor60