Packages
- APPLICATIONS
Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks
[ad_1] Several malicious packages have been uncovered across the npm, Python, and Ruby package repositories that drain funds from cryptocurrency…
Read More » - APPLICATIONS
Over 70 Malicious npm and VS Code Packages Found Stealing Data and Crypto
[ad_1] As many as 60 malicious npm packages have been discovered in the package registry with malicious functionality to harvest…
Read More » - APPLICATIONS
Malicious PyPI Packages Exploit Instagram and TikTok APIs to Validate User Accounts
[ad_1] Cybersecurity researchers have uncovered malicious packages uploaded to the Python Package Index (PyPI) repository that act as checker tools…
Read More » - APPLICATIONS
Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials
[ad_1] May 09, 2025Ravie LakshmananSupply Chain Attack / Malware Cybersecurity researchers have flagged three malicious npm packages that are designed…
Read More » - APPLICATIONS
GCP Cloud Composer Bug Let Attackers Elevate Access via Malicious PyPI Packages
[ad_1] Cybersecurity researchers have detailed a now-patched vulnerability in Google Cloud Platform (GCP) that could have enabled an attacker to…
Read More » - APPLICATIONS
Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems
[ad_1] Apr 19, 2025Ravie LakshmananLinux / Malware Cybersecurity researchers have uncovered three malicious packages in the npm registry that masquerade…
Read More » - REVIEWS
A look at slopsquatting, a supply chain attack where threat actors create malicious packages on indexes using AI-hallucinated names resembling popular libraries (Bill Toulas/BleepingComputer)
[ad_1] Featured Podcasts Lenny’s Podcast: Everyone’s an engineer now: Inside v0’s mission to create a hundred million builders | Guillermo…
Read More » - APPLICATIONS
North Korean Hackers Deploy BeaverTail Malware via 11 Malicious npm Packages
[ad_1] Apr 05, 2025Ravie LakshmananMalware / Supply Chain Attack The North Korean threat actors behind the ongoing Contagious Interview campaign…
Read More » - APPLICATIONS
Malicious Python Packages on PyPI Downloaded 39,000+ Times, Steal Sensitive Data
[ad_1] Apr 05, 2025Ravie LakshmananMalware / Supply Chain Attack Cybersecurity researchers have uncovered malicious libraries in the Python Package Index…
Read More » - APPLICATIONS
Nine-Year-Old npm Packages Hijacked to Exfiltrate API Keys via Obfuscated Scripts
[ad_1] Mar 28, 2025Ravie LakshmananCryptocurrency / Developer Security Cybersecurity researchers have discovered several cryptocurrency packages on the npm registry that…
Read More »
