Attackers gained control of the npm account for the Axios package, a widely used JavaScript HTTP client downloaded over 100 million times weekly, to distribute […]
TeamPCP hackers broke into the Telnyx package on the Python Package Index today. They uploaded harmful versions containing credential-stealing malware hidden in a WAV file. […]
The hacking group TeamPCP is continuing its supply chain attacks, now targeting the widely used “LiteLLM” Python package on PyPI and claiming to have obtained […]
A malicious package named openclaw-installer was recently discovered on the npm registry targeting developers by mimicking a legitimate installer for the OpenClaw game engine. Attack Details The package was […]
A malicious NuGet package named StripeApi.Net recently impersonated the official Stripe.net library to steal sensitive API tokens from developers. Key Details of the Attack Impact and Mitigation
© Bulletproof Servers. All rights reserved.