The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
A new info-stealing malware named Infinity Stealer is targeting macOS systems with a Python payload packaged as an executable using the open-source Nuitka compiler.
After hacking Trivy, TeamPCP moved to compromise repositories across NPM, Docker Hub, VS Code, and PyPI, stealing over 300GB ...
Hackers use credentials stolen in the GlassWorm campaign to access GitHub accounts and inject malware into Python ...
A phishing campaign targeting healthcare, government, hospitality, and education sectors uses several evasion techniques to ...
GlassWorm campaign injects malware into GitHub Python repos using stolen tokens since March 8, 2026, exposing developers to ...
A fake $TEMU crypto airdrop uses the ClickFix trick to make victims run malware themselves and quietly installs a ...
The compromised packages, linked to the Trivy breach, executed a three‑stage payload targeting AWS, GCP, Azure, Kubernetes ...
GlassWorm uses Solana and Google Calendar dead drops to deliver RAT stealing browser data and crypto wallets, impacting ...
Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide ...
8don MSN
Malicious campaign targets popular OpenWebUI AI interface to mine crypty and steal credentials
Cybernews researchers uncovered numerous OpenWebUI instances that were silently running malware.
Researchers say they’ve discovered a supply-chain attack flooding repositories with malicious packages that contain invisible ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results