#packages


Mini Shai-Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI & More Packages

May 12, 2026 // 11:52

TeamPCP,  the threat actor behind the recent supply chain attack spree, has been linked to the compromise of the npm and PyPI packages from TanStack, […]

PyPI Packages Deliver ZiChatBot Malware via Zulip APIs on Windows and Linux

May 7, 2026 // 12:28

Cybersecurity researchers have discovered three packages on the Python Package Index (PyPI) repository that are designed to stealthily deliver a previously unknown malware family called ZiChatBot […]

Official SAP npm packages compromised to steal credentials

Apr 30, 2026 // 01:56

Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal credentials and authentication tokens from developers’ […]

SAP npm Packages Compromised by “Mini Shai-Hulud” Credential-Stealing Malware

Apr 29, 2026 // 19:32

Cybersecurity researchers are sounding the alarm about a new supply chain attack campaign targeting SAP-related npm Packages with credential-stealing malware. According to reports from Aikido […]

Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer Tokens

Apr 22, 2026 // 20:40

Cybersecurity researchers have flagged a fresh set of packages that have been compromised by bad actors to deliver a self-propagating worm that spreads through stolen […]

N. Korean Hackers Injected 1700+ Malicious Packages Across Multiple Repositories.

Apr 8, 2026 // 10:49

The persistent North Korea-linked campaign, also known as Contagious Interview, has expanded its reach by disseminating harmful packages that target the Go, Rust, and PHP systems. […]

Ghost attack leverages seven npm packages. Wallets and credentials targeted for crypto theft.

Mar 24, 2026 // 15:03

Security specialists have discovered new harmful npm packages created to pilfer cryptocurrency wallets and private information. ReversingLabs is calling this the Ghost operation. The packages […]

Trivy Flaw Sparks Widespread npm CanisterWorm Outbreak Supply Chain Attack via Trivy Impacts 47 Packages

Mar 21, 2026 // 11:33

The individuals responsible for the supply chain attack that targeted the widely used Trivy scanner are believed to be launching additional attacks. These attacks have […]

Trivy Flaw Sparks npm Worm: CanisterWorm Infects 47 Packages, Spreads Rapidly.

Mar 21, 2026 // 11:24

The individuals responsible for the supply chain attack on the Trivy scanner are believed to be launching additional attacks, compromising numerous npm packages with a […]

New PhantomRaven NPM Attack Hits Developers: 88 Malicious Packages Found Stealing Data

Mar 11, 2026 // 23:27

The PhantomRaven threat actor group has launched a sophisticated supply chain attack targeting the NPM ecosystem, deploying 88 malicious packages designed to exfiltrate sensitive data from developer environments. The Attack Mechanism […]

Previous 1 … 4 5 6 7 Next