MemTensor Package Compromise Exposes Developers To Cross Platform Credential Stealer
Security researchers identify compromised MemTensor npm and PyPI packages delivering sckit malware designed to steal developer credentials and sensitive cloud data.
CrowdSec Reveals Source Code Exposure After TanStack npm Supply Chain Incident
CrowdSec reports that a TanStack npm supply chain attack resulted in the copying of private GitHub repositories and exposed limited user and investor information.
Malicious NPM Packages Disguised As PostCSS Tools Deliver Windows RAT To Developers
Security researchers have uncovered malicious npm packages posing as PostCSS tools that deploy a Windows remote access trojan, highlighting ongoing software supply chain threats targeting developers and open source ecosystems.
Massive GitHub Malware Campaign Exploits 10,000 Repositories To Distribute Trojanized Payloads
A large scale malware campaign has compromised 10,000 GitHub repositories, using cloned projects and Trojanized ZIP files to distribute malicious payloads while evading traditional detection mechanisms.
North Korean Hackers Turn Developer Tools Into Malware Delivery Channels Through GitHub And VS Code
Cybersecurity researchers uncover North Korea linked campaigns abusing GitHub repositories and Visual Studio Code projects to distribute malware targeting developers across multiple industries.
IronWorm And New Miasma Variant Target npm Ecosystem In Expanding Supply Chain Attacks
Cybersecurity researchers have uncovered IronWorm and a new Miasma worm variant targeting npm packages, stealing developer credentials and spreading malware through software supply chain attacks.
Exposure Surface: How Vibe Coding Is Rewriting the Rules of Credential Risk
Vibe coding is accelerating AI assisted software development while significantly increasing credential exposure risks, with millions of secrets leaking through code repositories and AI workflows.
