#deliver


18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

Aug 4, 2026 // 00:37

Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) […]

18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users

Aug 4, 2026 // 00:18

Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote access trojan (RAT) […]

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

Aug 3, 2026 // 14:58

A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, […]

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

Aug 3, 2026 // 14:38

A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, […]

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

Aug 1, 2026 // 09:36

A fake browser update served over hijacked hotel Wi-Fi has been used to deliver CornFlake, a remote access trojan (RAT) that can capture webcam images, […]

DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware

Jul 30, 2026 // 21:33

Threat actors with ties to North Korea have been attributed to a sophisticated macOS malvertising campaign that involves redirecting users to fake web pages displaying […]

Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT

Jul 18, 2026 // 00:23

Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting the Vite frontend tooling ecosystem as part of a software supply chain attack. […]

Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images

Jul 17, 2026 // 16:53

North Korean threat actors linked to the Contagious Interview campaign have been observed employing steganography in SVG image files to conceal malicious payloads as part […]

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

Jul 15, 2026 // 12:25

Four compromised npm packages in the @asyncapi namespace have been observed distributing a multi-stage botnet loader, according to findings from OX Security, SafeDep, Socket, and […]

VEIL#DROP Malware Chain Uses Blogger Platform to Deliver PureLogs Stealer

Jul 2, 2026 // 02:16

Cybersecurity researchers have flagged a new multi-stage malware delivery attack chain that uses social engineering and Blogger pages to deliver an information stealer called PureLogs. […]