Ten typosquatted npm packages (Jul 4, 2025) delivered a 24MB PyInstaller info stealer using 4 obfuscation layers; ~9,900 ...
A self-replicating malware is worming its way into open source software components. The malware's name is "Shai-hulud," presumably taking its name from the Dune sandworms, and it's particularly ...
Researchers outline how the PhantomRaven campaign exploits hole in npm to enable software supply chain attacks.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback