A large-scale cyberattack has once again hit the NPM ecosystem. Following the first Shai-Hulud worm in September, more than 1 ...
Charlie Eriksen, a researcher at Aikido, identified the infected libraries and confirmed each detection manually to minimize ...
Shai-Hulud malware infiltrates 490 NPM packages, stealing API keys and credentials from ENS and major crypto development ...
The Shai-Hulud supply chain attack campaign, responsible for compromising hundreds of CrowdStrike’s NPM packages in September ...
A researcher reported that more than 400 NPM libraries, including a cluster of ENS-linked crypto packages, were breached by ...
Researchers discovered a security weakness in the AI-powered coding tool that allows malicious MCP server to hijack Cursor's ...
RomCom just hit a US engineering firm via SocGholish for the first time, deploying Mythic Agent before defenders cut the ...
Google has released an emergency security update to fix the seventh Chrome zero-day vulnerability exploited in attacks this ...