Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.
A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.
Used in attacks against energy and utilities organizations, Lotus Wiper can overwrite drivers, delete files, and cripple ...
Scammers built a convincing fake Windows update site that installs password-stealing malware. Learn how the multi-stage ...
North Korean hackers used AppleScript and ClickFix in recent attacks targeting macOS systems at financial organizations.
CVE-2026-5752 CVSS 9.3 flaw in Terrarium enables root code execution via Pyodide prototype traversal, risking container ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results