108 Malicious Chrome Extensions Steal Google and Telegram Data, Affecting 20,000 UsersThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Malware42
Malicious Chrome Extensions Campaign Exposes User DataInfosecurity Magazine·Apr 14, 11:30 UTC · Apr 14, 2026Threat actor57
Google links Axios npm supply chain attack to North KoreaSecurity Affairs·Apr 1, 13:47 UTC · Apr 1, 2026Ransomware57
Widely used Trivy scanner compromised in ongoing supplyArs Technica · Security·Mar 20, 20:50 UTC · Mar 20, 2026Vulnerability42
GlassWorm Supply-Chain Attack Abuses 72 Open VSX Extensions to Target DevelopersThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Malware42
Malicious Go Crypto Module Steals Passwords, Deploys Rekoobe BackdoorThe Hacker News·Feb 28, 04:41 UTC · Feb 28, 2026Malware42
Shai-Hulud-Like Worm Targets Developers via npm and AI ToolsInfosecurity Magazine·Feb 23, 16:00 UTC · Feb 23, 2026Malware42
Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API TokensThe Hacker News·Feb 23, 10:20 UTC · Feb 23, 2026Malware142
Malicious packages for dYdX cryptocurrency exchange empties user walletsArs Technica · Security·Feb 6, 22:16 UTC · Feb 6, 2026Malware42
Compromised dYdX npm and PyPI Packages Deliver Wallet Stealers and RAT MalwareThe Hacker News·Feb 6, 08:40 UTC · Feb 6, 2026Malware42
Malicious PyPI Package Impersonates SymPy, Deploys XMRig Miner on Linux HostsThe Hacker News·Jan 24, 08:06 UTC · Jan 24, 2026Malware42
Fake browser crash alerts turn Chrome extension into enterprise backdoorHelp Net Security·Jan 19, 00:00 UTC · Jan 19, 2026Malware42
Friday Squid Blogging: The Chinese Squid-Fishing Fleet off the Argentine CoastSchneier on Security·Jan 9, 22:00 UTC · Jan 9, 2026Malware42
Contagious Interview campaign expands with 197 npm Ppackages spreading new OtterCookie malwareSecurity Affairs·Nov 30, 01:02 UTC · Nov 30, 2025Malware42
Seven npm Packages Use Adspect Cloaking to Trick Victims Into Crypto Scam PagesThe Hacker News·Nov 18, 18:06 UTC · Nov 18, 2025Phishing & fraud42
131 Chrome Extensions Caught Hijacking WhatsApp Web for Massive Spam CampaignThe Hacker News·Oct 20, 10:47 UTC · Oct 20, 2025Threat actor57
Self-Replicating Worm Hits 180+ npm Packages to Steal Credentials in Latest Supply Chain AttackThe Hacker News·Sep 22, 15:17 UTC · Sep 22, 2025Data breach157
Malicious npm Packages Impersonate Flashbots, Steal Ethereum Wallet KeysThe Hacker News·Sep 6, 06:42 UTC · Sep 6, 2025Threat actor57
RubyGems, PyPI Hit by Malicious Packages Stealing Credentials, Crypto, Forcing Security ChangesThe Hacker News·Aug 9, 06:49 UTC · Aug 9, 2025Vulnerability42
In search of riches, hackers plant 4GArs Technica · Security·Jul 30, 22:21 UTC · Jul 30, 2025Malware42
North Korean Hackers Flood npm Registry with XORIndex Malware in Ongoing Attack CampaignThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Malware42
Malicious Pull Request Targets 6,000+ Developers via Vulnerable Ethcode VS Code ExtensionThe Hacker News·Jul 10, 10:33 UTC · Jul 10, 2025Malware142
PyPI, npm, and AI Tools Exploited in Malware Surge Targeting DevOps and Cloud EnvironmentsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025Malware142
Donot Team group updates its Windows malware frameworkSecurity Affairs·Jun 2, 20:10 UTC · Jun 2, 2025Malware42
New Malware on PyPI Poses Threat to OpenInfosecurity Magazine·May 19, 16:45 UTC · May 19, 2025Malware42
Malicious Go Modules designed to wipe Linux systemsSecurity Affairs·May 4, 15:09 UTC · May 4, 2025Malware42
A new version of Triada spreads embedded in the firmware of Android devicesKaspersky Securelist·Apr 25, 10:00 UTC · Apr 25, 2025Vulnerability42
North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm PackagesThe Hacker News·Apr 7, 06:39 UTC · Apr 7, 2025Malware42
New advanced FIN7's Anubis backdoor allows to gain full system control on WindowsSecurity Affairs·Apr 2, 21:38 UTC · Apr 2, 2025Malware42
This Malicious PyPI Package Stole Ethereum Private Keys via Polygon RPC TransactionsThe Hacker News·Mar 7, 09:51 UTC · Mar 7, 2025Data breach57
Malicious PyPI Package "automslc" Enables 104K+ Unauthorized Deezer Music DownloadsThe Hacker News·Feb 27, 07:04 UTC · Feb 27, 2025Malware42
Go Module Mirror served backdoor to devs for 3+ yearsArs Technica · Security·Feb 5, 12:25 UTC · Feb 5, 2025Malware42
Hackers Deploy Malicious npm Packages to Steal Solana Wallet Keys via Gmail SMTPThe Hacker News·Jan 20, 06:08 UTC · Jan 20, 2025Malware42
Malicious Obfuscated NPM Package Disguised as an Ethereum Tool Deploys Quasar RATThe Hacker News·Jan 3, 04:52 UTC · Jan 3, 2025Malware142
Malware Campaign Uses Ethereum Smart Contracts to Control npm Typosquat PackagesThe Hacker News·Nov 5, 05:35 UTC · Nov 5, 2024Malware42
Perfctl Malware targets Linux servers in cryptomining campaignSecurity Affairs·Oct 4, 12:49 UTC · Oct 4, 2024MalwareCVE-2021-404347
Thousands of Linux systems infected by stealthy malware since 2021Ars Technica · Security·Oct 3, 23:42 UTC · Oct 3, 2024MalwareCVE-2023-33246CVE-2021-404347
Sketchy NuGet Package Likely Linked to Industrial Espionage Targets DevelopersThe Hacker News·Mar 27, 15:32 UTC · Mar 27, 2024Threat actor57
Hugging Face, the GitHub of AI, hosted code that backdoored user devicesArs Technica · Security·Mar 1, 18:02 UTC · Mar 1, 2024Malware42
STARTTLS implementations in email clients & servers plagued by 40+ vulnerabilitiesThe Record·Dec 13, 00:00 UTC · Dec 13, 2022VulnerabilityCVE-2020-9941CVE-2021-30696CVE-2020-15685+14 CVEs47