Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed PhantomSub. “The […]
At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers. The campaign, discovered by Aikido Security, […]
Cybersecurity researchers have flagged a compromised version of the Nx Console extension that was published to the Microsoft Visual Studio Code (VS Code) Marketplace. The […]
A previously undocumented Linux implant named Quasar Linux (QLNX) is targeting developers’ systems with a mix of rootkit, backdoor, and credential-stealing capabilities. The malware kit […]
A large-scale operation is targeting GitHub developers by posting bogus Visual Studio Code (VS Code) security warnings in project Discussions, with the goal of tricking […]
The PhantomRaven threat actor group has launched a sophisticated supply chain attack targeting the NPM ecosystem, deploying 88 malicious packages designed to exfiltrate sensitive data from developer environments. The Attack Mechanism […]
North Korean threat actors, specifically the FAMOUS CHOLLIMA group (linked to Lazarus), published 26 malicious npm packages in late February 2026 as part of the ongoing “Contagious […]
A sophisticated supply chain worm campaign codenamed SANDWORM_MODE is actively targeting the npm ecosystem. This campaign uses malicious packages to harvest cryptocurrency keys, CI/CD secrets, and API […]
© Bulletproof Servers. All rights reserved.