Trojanized npm Packages Deliver AI Powered RedC2 4.0 Linux Backdoor
Cybersecurity researchers discovered 14 npm packages hiding RedC2 4.0 Linux backdoor with AI assisted C2 capabilities, enabling post exploitation activities.
CloudSEK Warns LiteLLM Supply Chain Attack May Have Exposed Thousands Of Organizations
CloudSEK has revealed that malicious LiteLLM releases linked to the Trivy supply chain attack may have exposed more than 2,100 organizations by stealing cloud credentials, API keys, and other sensitive secrets.
Iran Linked Hackers Deploy Cavern C2 Framework To Target Regional Government And IT Organizations
Researchers have identified a new modular Cavern command and control framework used by an Iran linked hacking group to target government and IT organizations through supply chain attacks, advanced malware, and post exploitation techniques.
Malicious NPM Packages Disguised As PostCSS Tools Deliver Windows RAT To Developers
Security researchers have uncovered malicious npm packages posing as PostCSS tools that deploy a Windows remote access trojan, highlighting ongoing software supply chain threats targeting developers and open source ecosystems.
Over 140 Mastra NPM Packages Compromised In Supply Chain Attack Using Cryptocurrency Stealing Malware
Researchers have uncovered a supply chain attack targeting the Mastra npm ecosystem, where more than 140 packages were compromised through a hijacked contributor account and a malicious dependency designed to steal cryptocurrency wallet data and sensitive credentials.
North Korean Hackers Turn Developer Tools Into Malware Delivery Channels Through GitHub And VS Code
Cybersecurity researchers uncover North Korea linked campaigns abusing GitHub repositories and Visual Studio Code projects to distribute malware targeting developers across multiple industries.
Tampered WordPress Plugin Scripts Expose Sites To Hidden Backdoor Campaign
Trusted JavaScript files linked to PushEngage, OptinMonster, and TrustPulse were tampered with in a supply chain attack, potentially exposing over 1.2 million WordPress sites to hidden backdoors.
Over 400 Arch Linux AUR Packages Hijacked To Deploy Infostealer And eBPF Rootkit
More than 400 Arch Linux AUR packages were hijacked in a supply chain attack that deployed an infostealer and optional eBPF rootkit targeting developer credentials and sensitive systems.
OceanLotus Deploys SPECTRALVIPER In FireAnt Supply Chain And Vietnamese Infrastructure Espionage Campaigns
OceanLotus linked to dual cyber espionage operations targeting Vietnamese investors and infrastructure firms using SPECTRALVIPER through FireAnt Metakit supply chain compromise.
IronWorm And New Miasma Variant Target npm Ecosystem In Expanding Supply Chain Attacks
Cybersecurity researchers have uncovered IronWorm and a new Miasma worm variant targeting npm packages, stealing developer credentials and spreading malware through software supply chain attacks.
