Anthropic states that the code for Claude Code, which is proprietary, was accidentally made public. They assure that no client information or login details were […]
Attackers gained control of the npm account for the Axios package, a widely used JavaScript HTTP client downloaded over 100 million times weekly, to distribute […]
Security specialists have discovered new harmful npm packages created to pilfer cryptocurrency wallets and private information. ReversingLabs is calling this the Ghost operation. The packages […]
The individuals responsible for the supply chain attack that targeted the widely used Trivy scanner are believed to be launching additional attacks. These attacks have […]
The individuals responsible for the supply chain attack on the Trivy scanner are believed to be launching additional attacks, compromising numerous npm packages with a […]
The GlassWorm supply-chain attack is back with a large, synchronized assault affecting many packages, repositories, and add-ons on GitHub, npm, and VSCode/OpenVSX. Researchers from Aikido, […]
The PhantomRaven threat actor group has launched a sophisticated supply chain attack targeting the NPM ecosystem, deploying 88 malicious packages designed to exfiltrate sensitive data from developer environments. The Attack Mechanism […]
In its Cloud Threat Horizons Report (H1 2026), Google identified the threat actor UNC6426 as the group responsible for a swift breach of a victim’s cloud environment. The […]
A malicious package named openclaw-installer was recently discovered on the npm registry targeting developers by mimicking a legitimate installer for the OpenClaw game engine. Attack Details The package was […]
North Korean threat actors, specifically the FAMOUS CHOLLIMA group (linked to Lazarus), published 26 malicious npm packages in late February 2026 as part of the ongoing “Contagious […]
© Bulletproof Servers. All rights reserved.