A widely used JavaScript package used with hundreds of millions of downloads has been compromised in a new supply chain ...
The popular JavaScript HTTP client Axios has been compromised in a supply chain attack, exposing projects to malware through malicious npm releases. Security researchers from StepSecurity identified ...
Axios 1.14.1 and 0.30.4 injected malicious plain-crypto-js@4.2.1 after npm compromise on March 31, 2026, deploying ...
20d
ThreatDown Uncovers First Cyber Attack Abusing Deno JavaScript Runtime for Fileless Malware Delivery
ThreatDown, the corporate business unit of Malwarebytes, today published research documenting what researchers believe to be ...
DarkSword exploit targets iOS 18.4–18.7 using 6 flaws and 3 zero-days, enabling rapid data theft from iPhones across multiple ...
The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
Google Threat Intelligence Group (GTIG), Lookout Threat Labs, and iVerify published coordinated research in March 2026 on ...
Cryptopolitan on MSN
GhostClaw targets developers to extract crypto wallet access
A new malware dubbed GhostClaw is targeting crypto wallets on macOS machines. The fake OpenClaw installer captures private ...
Crypto scammers are exploiting the rising visibility of OpenClaw to target developers through a coordinated phishing campaign ...
While the creator of the AI agent platform OpenClaw banned the mention of bitcoin (BTC) and other crypto assets on its Discord channel, crypto scammers are now targeting developers on GitHub, aiming ...
An extremely popular NPM package used in many JavaScript projects has been compromised and can wreak havoc on your machine if ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results