Shai-Hulud npm Worm Returns, Poisoning Over 1,280 npm Packages
A quick-moving software program supply-chain assault has compromised Keyv and lots of of different npm packages, exposing developer workstations and ...
Tag: Packages
18 Malicious npm Packages Ship Cross-Platform RAT to Alibaba Device Customers
Cybersecurity researchers have found a brand new set of malicious npm packages that concentrate on customers of Alibaba developer instruments ...
Dozens of Purple Hat packages backdoored by way of its official NPM channel
Official Purple Hat NPM accounts have been compromised and used to push a malicious worm that spreads from machine to ...
Malicious Go Packages Impersonate Google’s UUID Library to Steal Delicate Information
A hidden hazard has been lurking within the Go programming ecosystem for over 4 years. Safety researchers from the Socket ...
Legacy Python Bootstrap Scripts Create Area-Takeover Threat in A number of PyPI Packages
Nov 28, 2025Ravie LakshmananMalware / Vulnerability Cybersecurity researchers have found susceptible code in legacy Python packages that might probably pave ...
Shai-Hulud is again with a brand new marketing campaign infecting extra npm packages
A brand new malicious marketing campaign linked to the Shai-Hulud worm is making its approach all through the npm ecosystem. ...
Tsundere Botnet Targets Home windows, Linux & macOS through Node.js Packages
A Russian-speaking risk actor attributed to the username “koneko” has resurfaced with a classy new botnet named Tsundere, found by ...
npm, PyPI, and RubyGems Packages Discovered Sending Developer Knowledge to Discord Channels
Oct 14, 2025Ravie LakshmananMalware / Typosquatting Cybersecurity researchers have recognized a number of malicious packages throughout npm, Python, and Ruby ...
Self-Replicating Worm Hits 180+ Software program Packages – Krebs on Safety
Not less than 187 code packages made obtainable via the JavaScript repository NPM have been contaminated with a self-replicating worm ...
New Shai-hulud Worm Infecting npm Packages With Hundreds of thousands of Downloads
ReversingLabs discovers “Shai-hulud,” a self-replicating laptop worm on the npm open-source registry. Learn the way the malware steals developer secrets ...
Trending.
