Source Link On August 8, CheckPoint published a report on ten malicious Python packages…
packages
-
-
Malware
Malicious npm Packages Used in Siphoning Off Discord Tokens, Card Data
by Deeba Ahmedby Deeba AhmedSource Link The malicious NPM packages used in this supply chain attack can steal…
-
Source Link On July 26, using the internal automated system for monitoring open-source repositories,…
-
Source Link Researchers have disclosed a new large-scale cryptocurrency mining campaign targeting the NPM…
-
Source Link Researchers have disclosed what they say could be an attempt to kick-off…
-
Application SecuritySecurity
Google to launch repository service with security-tested versions of open-source software packages
Source Link Developers across the enterprise space are concerned about the security of the…
-
Source Link Given the rise in malicious packages flooding the open-source environment, a new…
-
Source Link A “logical flaw” has been disclosed in NPM, the default package manager…
-
Source Link A threat actor dubbed “RED-LILI” has been linked to an ongoing large-scale…
-
Malware
Cybercriminals hit malware authors with malicious NPM packages
by Deeba Ahmedby Deeba AhmedSource Link Discord tokens have become the perfect medium for cybercriminals to gain unauthorized…