Search: “node.js”

1,360 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1028 Vulnerability 360 Exploit / PoC 87 Ransomware 81 Phishing & fraud 52 Threat actor 39 Data breach 33 Advisory 21 Policy & legal 13 Industry 10 AI tools & infra 7 AI research 6 AI safety & security 5 Research 3

SeverityAll critical 269 high 1360 medium 88 low 13 info 16

Open-source tool Sage puts a security layer between AI agents and the OS

Help Net SecurityMar 9, 00:00 UTC · Mar 9, 2026Malware

42

North Korean Hackers Publish 26 npm Packages Hiding Pastebin C2 for Cross

The Hacker NewsMar 3, 06:20 UTC · Mar 3, 2026Malware

42

Shai-Hulud-Like Worm Targets Developers via npm and AI Tools

Infosecurity MagazineFeb 23, 16:00 UTC · Feb 23, 2026Malware

42

Cline CLI 2.3.0 Supply Chain Attack Installed OpenClaw on Developer Systems

The Hacker NewsFeb 20, 14:40 UTC · Feb 20, 2026Threat actor

57

DPRK Operatives Impersonate Professionals on LinkedIn to Infiltrate Companies

The Hacker NewsFeb 11, 14:43 UTC · Feb 11, 2026Malware

42

Goodbye, dark Telegram: Blocks are pushing the underground out

Kaspersky SecurelistDec 9, 11:29 UTC · Dec 9, 2025Malware

42

Kaspersky Security Bulletin 2025. Statistics

Kaspersky SecurelistDec 2, 10:07 UTC · Dec 2, 2025Advisory

42

Contagious Interview campaign expands with 197 npm Ppackages spreading new OtterCookie malware

Security AffairsNov 30, 01:02 UTC · Nov 30, 2025Malware

42

North Korean Hackers Deploy 197 npm Packages to Spread Updated OtterCookie Malware

The Hacker NewsNov 28, 16:18 UTC · Nov 28, 2025Malware

42

ThreatsDay Bulletin: AI Malware, Voice Bot Flaws, Crypto Laundering, IoT Attacks — and 20 More Stories

The Hacker NewsNov 27, 10:03 UTC · Nov 27, 2025Malware CVE-2009-2765 CVE-2020-25506 CVE-2022-37055+6 CVEs

47

Inside the dark web job market

Kaspersky SecurelistNov 20, 15:02 UTC · Nov 20, 2025Malware

42

Minimus debuts Image Creator for building secure, hardened container images

Help Net SecurityNov 20, 00:00 UTC · Nov 20, 2025Vulnerability

42

npm, PyPI, and RubyGems Packages Found Sending Developer Data to Discord Channels

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Data breach1

57

Shai

Kaspersky SecurelistSep 25, 10:00 UTC · Sep 25, 2025Malware

42

DPRK Hackers Use ClickFix to Deliver BeaverTail Malware in Crypto Job Scams

The Hacker NewsSep 22, 15:17 UTC · Sep 22, 2025Malware

42

Self-replicating worm hits 180+ npm packages in (largely) automated supply chain attack

Help Net SecuritySep 16, 00:00 UTC · Sep 16, 2025Data breach

57

Fake npm 2FA reset email led to compromise of popular code packages

Help Net SecuritySep 9, 00:00 UTC · Sep 9, 2025Ransomware

57

Noisy Bear Campaign Targeting Kazakhstan Energy Sector Outed as a Planned Phishing Test

The Hacker NewsSep 8, 14:08 UTC · Sep 8, 2025Threat actor

57

Malicious Go, npm Packages Deliver Cross-Platform Malware, Trigger Remote Data Wipes

The Hacker NewsAug 8, 10:44 UTC · Aug 8, 2025Malware

42

Toptal GitHub Breach Exposes 73 Repositories and Injects Malware into 10 npm Packages

The Hacker NewsAug 6, 10:50 UTC · Aug 6, 2025Malware

42

AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before Takedown

The Hacker NewsAug 1, 12:48 UTC · Aug 1, 2025Vulnerability

42

Hackers Use Facebook Ads to Spread JSCEAL Malware via Fake Cryptocurrency Trading Apps

The Hacker NewsJul 31, 06:14 UTC · Jul 31, 2025Malware

42

Xoxo to Prague

Cisco TalosMay 15, 18:01 UTC · May 15, 2025Ransomware

57

Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems

The Hacker NewsApr 19, 15:13 UTC · Apr 19, 2025Malware

42

Phishing Campaigns Use Real-Time Checks to Validate Victim Emails Before Credential Theft

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2025Threat actor

57

GitVenom campaign targets gamers and crypto investors by posing as fake GitHub projects

Security AffairsFeb 26, 06:27 UTC · Feb 26, 2025Threat actor1

57

Hundreds of GitHub repos served up malware for years

Help Net SecurityFeb 26, 00:00 UTC · Feb 26, 2025Malware

42

GitVenom Malware Steals $456K in Bitcoin Using Fake GitHub Projects to Hijack Wallets

The Hacker NewsFeb 25, 10:13 UTC · Feb 25, 2025Malware

42

Fake GitHub projects distribute stealers in GitVenom campaign

Kaspersky SecurelistFeb 25, 06:21 UTC · Feb 25, 2025Malware

42

Cybercriminals Use Go Resty and Node Fetch in 13 Million Password Spraying Attempts

The Hacker NewsFeb 5, 13:08 UTC · Feb 5, 2025Threat actor

57

How Lazarus Group built a cyber espionage empire

Help Net SecurityJan 29, 00:00 UTC · Jan 29, 2025Threat actor

57

North Korea actors use OtterCookie malware in Contagious Interview campaign

Security AffairsDec 28, 07:00 UTC · Dec 28, 2024Malware

42

390,000+ WordPress Credentials Stolen via Malicious GitHub Repository Hosting PoC Exploits

The Hacker NewsDec 17, 04:40 UTC · Dec 17, 2024Exploit / PoC

57

Researchers Uncover Backdoor in Solana's Popular Web3.js npm Library

The Hacker NewsDec 6, 03:34 UTC · Dec 6, 2024Malware CVE-2024-54134

47

Kaspersky Security Bulletin 2024. Statistics

Kaspersky SecurelistDec 4, 13:41 UTC · Dec 4, 2024Advisory

42

XML-RPC npm Library Turns Malicious, Steals Data, Deploys Crypto Miner

The Hacker NewsNov 29, 04:52 UTC · Nov 29, 2024Data breach

57

Cyberthreats in the Middle East H1 2024

Kaspersky SecurelistOct 14, 07:00 UTC · Oct 14, 2024Ransomware

57

North Korean Hackers Target Cryptocurrency Users on LinkedIn with RustDoor Malware

The Hacker NewsSep 19, 09:24 UTC · Sep 19, 2024Malware

42

Experts warn of China

Security AffairsSep 18, 19:50 UTC · Sep 18, 2024Exploit / PoC

57

FIN7 Group Advertises Security

The Hacker NewsJul 18, 05:13 UTC · Jul 18, 2024Ransomware

57