The Hacker News is the top cybersecurity news platform, delivering real-time updates, threat intelligence, data breach ...
Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign ...
Ukrainian hackers leak Russia's naval secrets; ShinyHunters hack the FBI; tech firms disrupt EvilTokens PhaaS.
The NPM ecosystem has suffered another supply chain attack in which a malicious package has accumulated millions of downloads ...
A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.
A new npm supply chain campaign is hiding malware inside ordinary JavaScript package code instead of using the usual ...
Malicious npm package indexed-btree impersonated sorted-btree, using nearly 2M weekly downloads to steal data and deliver payloads.
Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server.
Graphalgo-linked malware hid in Terraform providers and Go packages, targeting developers and cloud infrastructure.
A supply-chain attack linked to the GHAPPIER malware campaign compromised the legitimate npm package @dforge-core/dforge-mcp and briefly ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results