Tag: software supply chain
83 articles
Dangerous npm Packages Disguised as Utilities That Delete Project Directories
Dangerous npm packages masquerade as utilities, but can delete your project directories. Learn how to spot and avoid these risky modules.
Malicious RubyGems pose as Fastlane to steal Telegram API data
Malicious RubyGems masquerading as Fastlane target Telegram API data—stay alert to protect your systems from these deceptive packages.
Reconnaissance Campaign Active on NPM Repository
A reconnaissance campaign on the NPM repository exposes vulnerabilities and drives urgent calls for stronger security protocols.
Trojanized RVTools Fuels SEO Poisoning Campaign with Bumblebee Malware
Trojanized RVTools fuels a malicious SEO poisoning campaign as Bumblebee malware compromises systems and skews search results.
New Malware on PyPI Poses Threat to Open-Source Developers
New malware on PyPI threatens open-source developers by injecting malicious code. Immediate vigilance and security measures are essential.
Deceptive PyPI Package Masquerading as a Solana Tool Pilfers Source Code in 761 Downloads
Deceptive PyPI package masquerading as a Solana tool pilfers source code in 761 downloads, exposing critical vulnerabilities for unsuspecting developers.
Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials
Malicious npm packages compromise 3,200+ Cursor users with backdoors that steal credentials, revealing critical security vulnerabilities.
Open source text editor poisoned with malware to target Uyghur users
Open-source text editor infected with malware allegedly targets Uyghur users, raising serious security and privacy concerns.
Major Supply Chain Attack: Ripple’s xrpl.js npm Package Compromised to Steal Private Keys
Ripple’s xrpl.js npm package was compromised in a major supply chain attack, leading to the theft of private keys from unsuspecting users.
Malicious npm Packages Imitate Telegram Bot API to Install SSH Backdoors on Linux
Malicious npm packages mimic the Telegram Bot API to install SSH backdoors on Linux, posing serious security risks for developers and systems.
The Art of Slopsquatting: Navigating the New Frontier of Cybersecurity Threats
Explore the unconventional lifestyle of slopsquatting, where creativity meets resourcefulness in a unique blend of art and living.