GitHub Actions re-enabled with Mini Shai-Hulud payload still active
Kothamine malware uses Tailscale’s tailcat to evade network detection
in the wild 11 min1
Malicious npm packages evade install-script defenses at runtime
Discovering and exploiting a remote code execution vulnerability in OpenCode (GHSA-632h-h47v-g4x4)
11 min
Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI
npm registry keeps removed-version timestamps but drops the reason (Sept 2025 campaign as evidence)
Shai-Hulud Attack Nips Cyber-Firm CrowdSec's GitHub Data
3 sources in the wild
North Korean Attackers Hit 30,000 Devices and Steal $10.7m
Attackers Abuse npm Trusted Publishing in GHAPPIER Campaign
KEVGraph: Exploitation-Aware Dependency Vulnerability Remediation
North Korean WaterPlum hackers infected 30,000 devices worldwide
in the wild 3 min
TanStack Supply Chain Attack Lets Hackers Steal 170 Private CrowdSec GitHub Repositories
in the wild 4 min
CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories
in the wild 4 min
WeaselBiscuit Stealer Spreads via 13 npm Packages to Harvest Chrome Extension Storage
in the wild 3 min1
Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
in the wild 3 min1
CASHEWS: Source Preprocessor for LLM-based Malicious Package Detection
Package Manager Trends
4 min1
AI Coding Tools Now a Prime Target for Threat Actors, Google Warns
Shai-Hulud's Reach Just Grew to 469 Credential Locations. Here's What That Means
in the wild 11 min1
Your threat feed is someone else's database: What ingesting malware intel at scale takes
5 min1
Open VSX Removes 77 Malicious Evil Twin Extensions Exfiltrating Developer Data
6 min1
⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More
in the wild 13 min1
Two Arrests, One Supply-Chain Attack, and a Lot of Stolen Credentials
in the wild 5 min1
Alleged TeamPCP Hackers Charged in Australia Over Major Supply Chain Attacks
in the wild 4 min1