The PhantomRaven threat actor group has launched a sophisticated supply chain attack targeting the NPM ecosystem, deploying 88 malicious packages designed to exfiltrate sensitive data from developer environments. The Attack Mechanism […]
Researchers have identified a new InstallFix malware campaign targeting developers through fake Claude Code installation guides. This social engineering attack tricks users into manually executing malicious commands that deploy […]
Security researchers at Socket discovered several malicious Packagist packages masquerading as Laravel utilities. These packages deploy a cross-platform Remote Access Trojan (RAT) targeting Windows, macOS, and Linux systems. Malicious Packages Identified The threat […]
A sophisticated phishing campaign is currently using fake Google Account security pages to trick users into installing malicious Progressive Web Apps (PWAs). These apps are designed to steal […]
North Korean threat actors, specifically the FAMOUS CHOLLIMA group (linked to Lazarus), published 26 malicious npm packages in late February 2026 as part of the ongoing “Contagious […]
The ClawJacked flaw is a critical security vulnerability in the OpenClaw (formerly Moltbot/Clawdbot) AI agent that allows malicious websites to take full control of locally running agents. Discovered by […]
A malicious NuGet package named StripeApi.Net recently impersonated the official Stripe.net library to steal sensitive API tokens from developers. Key Details of the Attack Impact and Mitigation
Recent supply chain attacks on NuGet and npm have targeted developers by exfiltrating sensitive application data and deploying cross-platform malware. Malicious NuGet Packages: ASP.NET Data Theft Researchers at Socket identified four […]
The 1Campaign platform is a “cybercrime-as-a-service” suite used by attackers to launch malicious Google Ads while bypassing automated security filters. Key tactics and features of the platform […]
A sophisticated supply chain worm campaign codenamed SANDWORM_MODE is actively targeting the npm ecosystem. This campaign uses malicious packages to harvest cryptocurrency keys, CI/CD secrets, and API […]
© Bulletproof Servers. All rights reserved.