Two malicious packages with nearly 8,500 downloads in Rust's official crate repository scanned developers' systems to steal ...

Hackers are sharing malicious SVG files which spoof real-life websites in order to trick victims into downloading damaging items. Cybersecurity researchers VirusTotal spotted the malware after adding ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

CountLoader enables Russian ransomware gangs to deploy Cobalt Strike and PureHVNC RAT via Ukraine phishing campaigns.

A newly-discovered malicious package with layers of obfuscation is disguised as a utility library, with malware essentially ...

Newly discovered npm package 'fezbox' employs QR codes to hide a second-stage payload to steal cookies from a user's web browser. The package, masquerading as a utility library, leverages this ...

North Korea’s Contagious Interview spreads AkdoorTea and TsunamiKit to steal crypto and infiltrate global developers.

An attack targeting the Node.js ecosystem was just identified — but not before it compromised 18 npm packages that account ...

A rare in-the-wild FileFix campaign has been observed by cybersecurity researchers, which hides a second-stage PowerShell ...

The vendor was one of a many whose code modules were infected by a never before seen strand of malware known as "Shai-Hulud." ...

Claude AI can now create and edit documents, spreadsheets, and other files. But Anthropic warns that hackers could snag your sensitive data.

Hulud" has compromised hundreds of packages in the npm repository with a self-replicating worm that steals secrets like API key, tokens, and cloud credentials and sends them to external servers that ...