Tracked topic
… Get the whitepaper Related Articles: Shai Hulud attack ships signed malicious TanStack, Mistral npm packages New Shai-Hulud malware wave compromises 600 npm packages Popular node-ipc npm package compromised to steal credentials PyPI package with 1.1M monthly downloads hacked to push infostealer New… …
… Researchers at OXsecurity, a company that secures applications from code to runtime, discovered the malicious uploads over the weekend and noticed that the threat actor used misspelled names typosquatting targeting Axios users, and some generic ones: chalk-tempalte – Shai-Hulud clone information st… …
… Given that Shai Hulud's code was recently leaked on GitHub by the TeamPCP threat group, and has already been used in attacks , attribution of the new Shai-Hulud campaign is more difficult. …
… Download Now Related Articles: Bitwarden CLI npm package compromised to steal developer credentials New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships signed malicious TanStack, Mistral npm packages TeamPCP hackers advertise Mistral AI code repos for sale OpenAI confir… …
… Get the whitepaper Related Articles: New Shai-Hulud attack trojanizes 19 science-focused PyPI packages New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships signed malicious TanStack, Mistral npm packages New IronWorm malware hits 36 packages in npm supply-chain attack Gr… …
… Get the whitepaper Related Articles: New IronWorm malware hits 36 packages in npm supply-chain attack GitHub disables Microsoft repos pushing password-stealing malware New Shai-Hulud attack trojanizes 19 science-focused PyPI packages Red Hat npm packages compromised to steal developer credentials N… …
… This behavior is conceptually similar to Shai Hulud , which had its code published on GitHub recently. Although JFrog researchers did not find a clear connection between IronWorm and Shai Hulud, they observed the same commit names in both supply-chain attacks. …
… Download Now Related Articles: TeamPCP hackers advertise Mistral AI code repos for sale Official SAP npm packages compromised to steal credentials Shai Hulud attack ships signed malicious TanStack, Mistral npm packages Bitwarden CLI npm package compromised to steal developer credentials Trivy vulne… …
… Get the whitepaper Related Articles: GitHub disables Microsoft repos pushing password-stealing malware New IronWorm malware hits 36 packages in npm supply-chain attack New Shai-Hulud malware wave compromises 600 npm packages Shai Hulud attack ships signed malicious TanStack, Mistral npm packages Po… …
… Get the whitepaper Related Articles: Shai Hulud attack ships signed malicious TanStack, Mistral npm packages New Shai-Hulud attack trojanizes 19 science-focused PyPI packages Leaked Shai-Hulud malware fuels new npm infostealer campaign Popular node-ipc npm package compromised to steal credentials T… …