Search: “malicious packages”

3,281 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1307 Vulnerability 658 Ransomware 350 Exploit / PoC 265 Data breach 196 Threat actor 186 Phishing & fraud 125 AI safety & security 64 Policy & legal 52 Industry 46 Research 15 Advisory 14 AI tools & infra 13 Tools 11

SeverityAll critical 962 high 1419 medium 777 low 89 info 59

The serpent’s tongue: Luring the Python out of its den

Cisco TalosJul 14, 10:00 UTC · Jul 14, 2026Malware1

55

Malicious npm packages spotted delivering njRAT Trojan

Security AffairsDec 1, 21:07 UTC · Dec 1, 2020Malware

42

Malicious NuGet Package Targeting .NET Developers with SeroXen RAT

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2023Malware

42

OpenAI hit by supply chain attack linked to malicious TanStack packages

Security AffairsMay 16, 09:31 UTC · May 16, 2026Malware

42

Malicious Python packages employ advanced detection evasion techniques

Help Net SecurityNov 22, 00:00 UTC · Nov 22, 2021Malware

30

BeaverTail Malware Resurfaces in Malicious npm Packages Targeting Developers

The Hacker NewsOct 28, 17:12 UTC · Oct 28, 2024Malware

42

Malicious npm and PyPI target Solana Private keys to steal funds from victims' wallets

Security AffairsJan 20, 12:32 UTC · Jan 20, 2025Malware

30

Malicious npm Packages Deliver Sophisticated Reverse Shells

Infosecurity MagazineMar 26, 13:30 UTC · Mar 26, 2025Vulnerability

42

60 New Malicious Packages Uncovered in NuGet Supply Chain Attack

The Hacker NewsJul 12, 03:38 UTC · Jul 12, 2024Malware

42

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

The Hacker NewsJul 4, 11:17 UTC · Jul 4, 2026Threat actor

45

Malicious npm Packages Used to Target GitHub Developer SSH Keys

Infosecurity MagazineJan 23, 17:00 UTC · Jan 23, 2024Malware1

42

Malicious npm packages caught stealing Discord tokens, environment variables

The RecordDec 21, 00:00 UTC · Dec 21, 2022Vulnerability

30

North Korean Hackers Are Turning Developer Tools Into Malware Delivery Channels

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2026Malware

42

Malicious PyPl Packages Downloaded 40,000+ Times

Infosecurity MagazineNov 19, 09:30 UTC · Nov 19, 2021Malware

42

PyPI Halts Sign-Ups Amid Surge of Malicious Package Uploads Targeting Developers

The Hacker NewsMar 30, 05:08 UTC · Mar 30, 2024Malware

42

Over a Dozen Malicious npm Packages Target Roblox Game Developers

The Hacker NewsAug 23, 06:37 UTC · Aug 23, 2023Malware

42

Malicious package with AdaptixC2 framework agent found in npm registry

Kaspersky SecurelistOct 17, 10:00 UTC · Oct 17, 2025Malware

55

Over 200 Malicious NPM Packages Caught Targeting Azure Developers

The Hacker NewsMar 25, 06:27 UTC · Mar 25, 2022Malware

42

RubyGems, PyPI Hit by Malicious Packages Stealing Credentials, Crypto, Forcing Security Changes

The Hacker NewsAug 9, 06:49 UTC · Aug 9, 2025Vulnerability

42

NPM flooded with malicious packages downloaded more than 86,000 times

Ars Technica · SecurityOct 29, 21:04 UTC · Oct 29, 2025Threat actor

45

Here's a New Tool That Scans Open-Source Repositories for Malicious Packages

The Hacker NewsMay 3, 03:59 UTC · May 3, 2022Malware

42

OceanLotus suspected of distributing ZiChatBot malware via wheel packages in PyPI

Kaspersky SecurelistMay 5, 14:33 UTC · May 5, 2026Malware

42

Sonatype Reports 156% Increase in OSS Malicious Packages

Infosecurity MagazineOct 11, 11:00 UTC · Oct 11, 2024Vulnerability

55

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

The Hacker NewsMay 31, 12:15 UTC · May 31, 2026Data breach1

57

A Large-Scale Supply Chain Attack Distributed Over 800 Malicious NPM Packages

The Hacker NewsMar 29, 12:14 UTC · Mar 29, 2022Threat actor

57

New Malicious Python Libraries Found on PyPI Repository

Infosecurity MagazineAug 9, 17:30 UTC · Aug 9, 2022Malware1

55

IT threat evolution Q3 2022

Kaspersky SecurelistNov 18, 08:00 UTC · Nov 18, 2022Ransomware CVE-2017-10271

60

Malicious package containing Bytecoin cryptocurrency miner found on the Ubuntu Snap Store

Security AffairsMay 13, 13:58 UTC · May 13, 2018Malware

30

Experts found 11 malicious Python packages in the PyPI repository

Security AffairsNov 21, 18:53 UTC · Nov 21, 2021Malware

30

Malicious NuGet Package Targets Stripe Developers

Infosecurity MagazineFeb 25, 13:00 UTC · Feb 25, 2026Malware1

55

Researchers Discover Malicious PyPI Package Posing as SentinelOne SDK to Steal Data

The Hacker NewsDec 20, 05:29 UTC · Dec 20, 2022Malware

42

Malicious Python Package uses Unicode to evade detection

Security AffairsMar 27, 07:05 UTC · Mar 27, 2023Malware1

42

Malicious Python packages found on PyPI

Help Net SecurityJul 18, 00:00 UTC · Jul 18, 2019Malware1

42

Malicious PyPI Package Targets MEXC Trading API to Steal Credentials and Redirect Orders

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2025Vulnerability

42

North Korean Hackers Moonstone Sleet Push Malicious JS Packages to npm Registry

The Hacker NewsAug 6, 15:47 UTC · Aug 6, 2024Vulnerability

30

18 Malicious npm Packages Deliver Cross

The Hacker NewsAug 3, 18:43 UTC · Aug 3, 2026Data breach

57

Dozens of Malicious 'HTTP' Libraries Found on PyPI

Infosecurity MagazineFeb 23, 16:30 UTC · Feb 23, 2023Malware

30

Experts warn of the first known phishing attack against PyPI

Security AffairsAug 28, 15:36 UTC · Aug 28, 2022Phishing & fraud

55

North Korea-linked actors spread XORIndex malware via 67 malicious npm packages

Security AffairsJul 15, 09:48 UTC · Jul 15, 2025Malware

55

npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Data breach1

57