#add


101 Malicious npm Packages Add Developers’ WhatsApp Accounts to Groups Without Consent

Sep 29, 2026 // 16:50

Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub. “The […]

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

Aug 31, 2026 // 20:53

The threat actor known as Silver Fox has been observed distributing the ValleyRAT backdoor disguised as a signed Chinese adware application, running the malware under […]

GitHub, PyPI add time-based defenses against supply chain attacks

Jul 26, 2026 // 23:37

GitHub and PyPI (Python Package Index) have introduced a time-based mechanism in the Dependabot dependency management tool to protect against supply-chain attacks and to limit […]