Security researchers at Socket discovered several malicious Packagist packages masquerading as Laravel utilities. These packages deploy a cross-platform Remote Access Trojan (RAT) targeting Windows, macOS, and Linux systems. Malicious Packages Identified The threat […]
North Korean threat actors, specifically the FAMOUS CHOLLIMA group (linked to Lazarus), published 26 malicious npm packages in late February 2026 as part of the ongoing “Contagious […]
Recent supply chain attacks on NuGet and npm have targeted developers by exfiltrating sensitive application data and deploying cross-platform malware. Malicious NuGet Packages: ASP.NET Data Theft Researchers at Socket identified four […]
A sophisticated supply chain worm campaign codenamed SANDWORM_MODE is actively targeting the npm ecosystem. This campaign uses malicious packages to harvest cryptocurrency keys, CI/CD secrets, and API […]
© Bulletproof Servers. All rights reserved.