Dozens of Purple Hat packages backdoored by way of its official NPM channel
Official Purple Hat NPM accounts have been compromised and used to push a malicious worm that spreads from machine to ...
Tag: Packages
Malicious Go Packages Impersonate Google’s UUID Library to Steal Delicate Information
A hidden hazard has been lurking within the Go programming ecosystem for over 4 years. Safety researchers from the Socket ...
Legacy Python Bootstrap Scripts Create Area-Takeover Threat in A number of PyPI Packages
Nov 28, 2025Ravie LakshmananMalware / Vulnerability Cybersecurity researchers have found susceptible code in legacy Python packages that might probably pave ...
Shai-Hulud is again with a brand new marketing campaign infecting extra npm packages
A brand new malicious marketing campaign linked to the Shai-Hulud worm is making its approach all through the npm ecosystem. ...
Tsundere Botnet Targets Home windows, Linux & macOS through Node.js Packages
A Russian-speaking risk actor attributed to the username “koneko” has resurfaced with a classy new botnet named Tsundere, found by ...
npm, PyPI, and RubyGems Packages Discovered Sending Developer Knowledge to Discord Channels
Oct 14, 2025Ravie LakshmananMalware / Typosquatting Cybersecurity researchers have recognized a number of malicious packages throughout npm, Python, and Ruby ...
Self-Replicating Worm Hits 180+ Software program Packages – Krebs on Safety
Not less than 187 code packages made obtainable via the JavaScript repository NPM have been contaminated with a self-replicating worm ...
New Shai-hulud Worm Infecting npm Packages With Hundreds of thousands of Downloads
ReversingLabs discovers “Shai-hulud,” a self-replicating laptop worm on the npm open-source registry. Learn the way the malware steals developer secrets ...
40 npm Packages Compromised in Provide Chain Assault Utilizing bundle.js to Steal Credentials
Sep 16, 2025Ravie LakshmananMalware / Cyber Assault Cybersecurity researchers have flagged a recent software program provide chain assault concentrating on ...
18 In style Code Packages Hacked, Rigged to Steal Crypto – Krebs on Safety
At the least 18 in style JavaScript code packages which are collectively downloaded greater than two billion instances every week ...
