Search: “Bun”

21 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 14 Vulnerability 9 Data breach 8 Exploit / PoC 2 Industry 2 Phishing & fraud 2 Ransomware 2 Research 2 Threat actor 2 AI safety & security 2 AI tools & infra 1

SeverityAll critical 9 high 21 medium 8 low 6 info 2

Hades PyPI Attack: 19 Packages Poisoned to Auto

The Hacker NewsJun 9, 10:34 UTC · Jun 9, 2026Malware1

42

PyTorch Lightning and Intercom-client Hit in Supply Chain Attacks to Steal Credentials

The Hacker NewsMay 1, 16:27 UTC · May 1, 2026Ransomware

57

Miasma Malware Targets npm Packages and GitHub Actions in Supply Chain Attack

The Hacker NewsJul 10, 17:27 UTC · Jul 10, 2026Malware

42

VS Code Adds 2-Hour Extension Auto-Update Delay to Limit Supply Chain Attacks

The Hacker NewsJun 8, 17:09 UTC · Jun 8, 2026Malware

42

Nothing to steal? Let’s wipe. We’re analyzing the Shai Hulud 2.0 npm worm

Kaspersky SecurelistDec 4, 15:46 UTC · Dec 4, 2025Data breach1

57

Keyv-Linked npm Worm Poisons Hundreds of Packages, Plants Claude Code and VS Code Hooks

The Hacker NewsAug 4, 15:03 UTC · Aug 4, 2026Malware1

42

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

The Hacker NewsJun 6, 06:23 UTC · Jun 6, 2026Data breach

57

Malicious PyTorch Lightning update hits AI supply chain security

Security AffairsMay 6, 07:04 UTC · May 6, 2026Malware

42

New Shai

Infosecurity MagazineNov 25, 10:00 UTC · Nov 25, 2025Ransomware

57

GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption

The Hacker NewsJul 27, 08:01 UTC · Jul 27, 2026Vulnerability1

42

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-48558

60

Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues

The Hacker NewsJun 10, 04:50 UTC · Jun 10, 2026Data breach

57

Miasma Worm Hits 73 Microsoft GitHub Repositories in Major Supply Chain Attack

The Hacker NewsJun 9, 05:50 UTC · Jun 9, 2026Vulnerability1

42

Compromised Nx Console 18.95.0 Targeted VS Code Developers with Credential Stealer

The Hacker NewsMay 25, 09:00 UTC · May 25, 2026Malware1

42

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

The Hacker NewsMay 21, 05:56 UTC · May 21, 2026Malware

42

Mini Shai-Hulud Hits Hundreds of npm Packages in AntV Ecosystem

Infosecurity MagazineMay 20, 15:00 UTC · May 20, 2026Data breach

57

CVE Lite CLI: Open-source dependency vulnerability scanner

Help Net SecurityMay 20, 00:00 UTC · May 20, 2026Vulnerability

42

Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials

The Hacker NewsMay 19, 09:12 UTC · May 19, 2026Data breach

57

Checkmarx supply chain attack impacts Bitwarden npm distribution path

Security AffairsApr 25, 21:59 UTC · Apr 25, 2026Data breach

57

Malicious KICS Docker Images and VS Code Extensions Hit Checkmarx Supply Chain

The Hacker NewsApr 24, 04:35 UTC · Apr 24, 2026Malware

42

⚡ Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More

The Hacker NewsDec 2, 05:36 UTC · Dec 2, 2025Vulnerability CVE-2025-59287 CVE-2025-12972 CVE-2025-12970+17 CVEs1

47