#tokens


Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer Tokens

Apr 22, 2026 // 20:40

Cybersecurity researchers have flagged a fresh set of packages that have been compromised by bad actors to deliver a self-propagating worm that spreads through stolen […]

New npm supply-chain attack self-spreads to steal auth tokens

Apr 22, 2026 // 16:16

A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised […]

Compromised LiteLLM Package Stole Credentials, Tokens from PyPI Users

Mar 25, 2026 // 10:57

The hacking group TeamPCP is continuing its supply chain attacks, now targeting the widely used “LiteLLM” Python package on PyPI and claiming to have obtained […]

Stolen GitHub tokens enable GlassWorm attack. Python repos force-pushed with malware.

Mar 18, 2026 // 13:26

The GlassWorm malware is being exploited in an active attack that uses compromised GitHub tokens to inject malicious code into hundreds of Python software collections. […]

RoguePilot Exploit: How GitHub Codespaces Flaw Let Copilot Leak Tokens

Feb 24, 2026 // 23:36

The RoguePilot flaw was a critical AI-driven vulnerability in GitHub Codespaces (discovered by Orca Security) that allowed attackers to perform a full repository takeover by exploiting GitHub Copilot. The attack chain […]