Malware & Threats
Supply chain attack compromises the popular rand-user-agent NPM package to deploy and activate a backdoor.
Hi, what are you looking for?
SecurityWeek
All posts tagged "NPM"
Malware & Threats
Three NPM packages posing as developer tools for Cursor AI code editor’s macOS version contain a backdoor.
Malware & Threats
Nearly a dozen crypto packages on NPM, including one published 9 years ago, have been hijacked to deliver infostealers.
Malware & Threats
Apparently malicious NPM packages linked to Snyk raised some concerns, but the security firm clarified that it’s part of a research project.
Malware & Threats
Threat actor uses typosquatting to trick hundreds of users into downloading a malicious NPM package that delivers the r77 rootkit.
Malware & Threats
Fortinet warns of multiple malicious NPM packages that include install scripts designed to steal sensitive information.
Malware & Threats
Security researchers are warning of a new wave of malicious NPM and PyPI packages designed to steal user information and download additional payloads.
Malware & Threats
Patch Tuesday: Microsoft patches at least 70 security bugs and flagged five zero-days in the “exploitation detected” category.
Mobile & Wireless
Tracking & Law Enforcement
Vulnerabilities
Incident Response
Adobe Patch Tuesday headlined by a major Adobe ColdFusion update patching a wide swatch of code execution and privilege escalation attacks.
Uncategorized
Threat Intelligence
Vulnerabilities
