MemTensor Package Compromise Exposes Developers To Cross Platform Credential Stealer
Security researchers identify compromised MemTensor npm and PyPI packages delivering sckit malware designed to steal developer credentials and sensitive cloud data.
Malicious npm Package Indexed Btree Uses Runtime Code To Hide Malware
Security researchers have uncovered a malicious npm package called indexed-btree that concealed malware inside runtime code, highlighting changing software supply chain attack methods.
Trojanized npm Packages Deliver AI Powered RedC2 4.0 Linux Backdoor
Cybersecurity researchers discovered 14 npm packages hiding RedC2 4.0 Linux backdoor with AI assisted C2 capabilities, enabling post exploitation activities.
Malicious NPM Packages Disguised As PostCSS Tools Deliver Windows RAT To Developers
Security researchers have uncovered malicious npm packages posing as PostCSS tools that deploy a Windows remote access trojan, highlighting ongoing software supply chain threats targeting developers and open source ecosystems.
VS Code Introduces Two Hour Extension Update Delay To Reduce Software Supply Chain Risks
Microsoft adds a two hour delay for automatic VS Code extension updates to reduce supply chain attacks while allowing immediate updates for trusted publishers.
