Search: “cli”

166 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 200 Exploit / PoC 95 Malware 91 AI tools & infra 45 Industry 36 Ransomware 32 Data breach 32 Tools 28 AI safety & security 26 Threat actor 23 Policy & legal 23 Model release 19 AI industry 11 Phishing & fraud 9

SeverityAll critical 241 high 166 medium 119 low 72 info 93

GitHub Updates actions/checkout to Block Common Pwn Request Attack Patterns

The Hacker NewsJun 23, 14:22 UTC · Jun 23, 2026Vulnerability

42

Malicious npm Packages Pose as PostCSS Tools to Deliver Windows RAT

The Hacker NewsJun 23, 09:01 UTC · Jun 23, 2026Malware

42

Open-source CI/CD abuse detector guards against stolen credential attacks

Help Net SecurityJun 15, 00:00 UTC · Jun 15, 2026Vulnerability

42

Microsoft Hacked to Deliver Malware to Claude and Gemini Users

404 MediaJun 9, 12:38 UTC · Jun 9, 2026Malware1

42

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

The Hacker NewsJun 6, 06:23 UTC · Jun 6, 2026Data breach

57

Attackers already know the secrets are on your developers' machines. Do you?

Help Net SecurityJun 4, 00:00 UTC · Jun 4, 2026Threat actor

57

OpenAI Codex Authentication Tokens Stolen in codexui

The Hacker NewsJun 1, 09:31 UTC · Jun 1, 2026Threat actor1

57

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

The Hacker NewsMay 25, 09:00 UTC · May 25, 2026Malware1

42

TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO

The Hacker NewsMay 25, 05:59 UTC · May 25, 2026Malware

42

npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks

The Hacker NewsMay 24, 08:15 UTC · May 24, 2026Industry1

42

GitHub, Grafana Labs breaches traced back to TanStack supply chain compromise

Help Net SecurityMay 21, 00:00 UTC · May 21, 2026Vulnerability1

42

TeamPCP Compromises Checkmarx Jenkins AST Plugin Weeks After KICS Supply Chain Attack

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Malware

42

TanStack Supply Chain Attack Hits Two OpenAI Employee Devices, Forces macOS Updates

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Ransomware

57

Stealer Backdoor Found in 3 Node

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Malware

42

Quasar Linux RAT Steals Developer Credentials for Software Supply Chain Compromise

The Hacker NewsMay 8, 11:00 UTC · May 8, 2026Malware

42

Poisoned Ruby Gems and Go Modules Exploit CI Pipelines for Credential Theft

The Hacker NewsMay 1, 09:43 UTC · May 1, 2026Data breach

57

Open source package with 1 million monthly downloads stole user credentials

Ars Technica · SecurityApr 27, 21:04 UTC · Apr 27, 2026Vulnerability

42

Checkmarx Confirms GitHub Repository Data Posted on Dark Web After March 23 Attack

The Hacker NewsApr 27, 14:19 UTC · Apr 27, 2026Ransomware

57

New linux_avp malware hits eCommerce sites

Sansec (Magento / e-commerce security)Apr 14, 19:49 UTC · Apr 14, 2026Malware

42

Claude Code Source Leaked via npm Packaging Error, Anthropic Confirms

The Hacker NewsApr 3, 08:38 UTC · Apr 3, 2026Malware1

42

Hackers Hijack Axios npm Package to Spread RATs

Infosecurity MagazineApr 1, 09:00 UTC · Apr 1, 2026Malware

42

A Top Google Search Result for Claude Plugins Was Planted by Hackers

404 MediaMar 24, 13:35 UTC · Mar 24, 2026Malware

42

Product showcase: Cross-platform and third-party endpoint patching with Action1

Help Net SecurityMar 24, 00:00 UTC · Mar 24, 2026Ransomware in the wild

60

Malicious Go Crypto Module Steals Passwords, Deploys Rekoobe Backdoor

The Hacker NewsFeb 28, 04:41 UTC · Feb 28, 2026Malware

42

Brutus: Open-source credential testing tool for offensive security

Help Net SecurityFeb 13, 00:00 UTC · Feb 13, 2026Malware

42

Three Flaws in Anthropic MCP Git Server Enable File Access and Code Execution

The Hacker NewsJan 20, 13:55 UTC · Jan 20, 2026Vulnerability CVE-2025-68143 CVE-2025-68144 CVE-2025-681451

47

Supply chains, AI, and the cloud: The biggest failures (and one success) of 2025

Ars Technica · SecurityDec 31, 13:15 UTC · Dec 31, 2025Data breach

57

Traditional Security Frameworks Leave Organizations Exposed to AI

The Hacker NewsDec 29, 06:34 UTC · Dec 29, 2025Data breach

57

Researcher Uncovers 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE Attacks

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2025Vulnerability CVE-2025-49150 CVE-2025-53097 CVE-2025-58335+8 CVEs1

47

AI-Enabled Malware Now Actively Deployed, Says Google

Infosecurity MagazineNov 6, 09:45 UTC · Nov 6, 2025Malware

42

Google uncovers malware using LLMs to operate and evade detection

Help Net SecurityNov 5, 00:00 UTC · Nov 5, 2025Malware1

42

PhantomRaven Malware Found in 126 npm Packages Stealing GitHub Tokens From Devs

The Hacker NewsOct 30, 11:46 UTC · Oct 30, 2025Malware

42

GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security

The Hacker NewsSep 25, 07:40 UTC · Sep 25, 2025Malware

42

China-linked APT41 targets government, think tanks, and academics tied to US

Security AffairsSep 17, 20:26 UTC · Sep 17, 2025Threat actor

57

Chinese APT Actor Compromises Military Firm with Novel Fileless Malwar

Infosecurity MagazineSep 11, 13:45 UTC · Sep 11, 2025Vulnerability

42

Toptal GitHub Breach Exposes 73 Repositories and Injects Malware into 10 npm Packages

The Hacker NewsAug 6, 10:50 UTC · Aug 6, 2025Malware

42

GhostContainer backdoor for Exchange servers

Kaspersky SecurelistJul 17, 08:00 UTC · Jul 17, 2025Malware CVE-2020-0688

47

Cisco removed the backdoor account from its Unified Communications Manager

Security AffairsJul 2, 19:13 UTC · Jul 2, 2025Malware CVE-2025-20309

47

New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally

The Hacker NewsJun 9, 16:37 UTC · Jun 9, 2025Malware

42

New Self-Spreading Malware Infects Docker Containers to Mine Dero Cryptocurrency

The Hacker NewsMay 27, 16:23 UTC · May 27, 2025Malware

42