Technology ❯ Cybersecurity ❯ Malware

Supply Chain Attacks

npm Packages App Development Web Development Open Source Threats Credential Theft Ethereum Data Theft Incident Response NPM Security Crypto-Clipper Malware Visual Studio Code Extensions Shai-Hulud 2.0 NPM Packages npm Registry npm Worms NPM Ecosystem PhantomRaven GlassWorm NuGet Packages NPM Infections Node.js

Malicious npm 'Lotusbail' Package Steals WhatsApp Data and Plants Persistent Backdoor

The package remains available on npm after public disclosure.

Shai-Hulud 2.0 Exposes 400,000 Developer Secrets Across NPM and GitHub

Shai-Hulud npm Worm Exposes 25,000+ GitHub Repos Through Trojanized Packages

Malicious NuGet Packages With Delayed Sabotage Removed After Socket Discovery

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages

GlassWorm Actively Infects VS Code and OpenVSX Extensions, With 35,800 Installations Reported

Python Software Foundation Flags Active PyPI Phishing With pypi-mirror.org, Urges Immediate Password Resets

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

Phished npm Maintainer’s Packages Used in Crypto-Clipping Attack as Rapid Takedown Limits Damage

Malicious npm Packages Tap Ethereum Smart Contracts for Stealthy C2

Nx npm Packages Compromised in 'S1ngularity' Attack With Second-Wave Exploitation Emerging

US Sanctions Funnull Technology for Enabling $200M Crypto ‘Pig Butchering’ Scams