CySecurity News - Latest Information Security and Hacking Incidents: NPM Package

Labels



 Trendy Right Now

Showing posts with label NPM Package. Show all posts

North Korean Hackers Use 11 Malicious npm Packages to Propagate BeaverTail Malware



 

RAT

BeaverTail malware North Korea Hackers NPM Package RAT

North Korean Hackers Use 11 Malicious npm Packages to Propagate BeaverTail Malware

The North Korean threat actors behind the ongoing Contagious Interview campaign are expanding their tentacles on the npm ecosystem by distributing more malicious packages...

Unmasking the Surge of Malicious NPM and PyPI Packages



 

Unauthorized access

Data Breach Exfiltration Malicious actor Malware Developers NPM Package Platform PyPI Package SSH Third Party Apps Unauthorized access

Unmasking the Surge of Malicious NPM and PyPI Packages

Cyberattacks originating from malicious packages on widely used software repositories like NPM and PyPI have increased significantly recently, as seen in the cybersecurity landscape....

GitHub Issues Alert on Lazarus Group's Social Engineering Attack on Developers



 

Technology

Cyber Victim Cyberattacks Cybersecurity GitHub lazarus Malicious Threat NPM Package Technology

GitHub Issues Alert on Lazarus Group's Social Engineering Attack on Developers

According to a security alert issued by GitHub, this social engineering campaign is designed to compromise developers' accounts in the blockchain, cryptocurrency, online...



 

Vulnerabilities and Exploits.

data threat Developers JavaScript NPM Package Vulnerabilities and Exploits.

JavaScript Registry npm at Risk

The JavaScript registry npm, a vital resource for developers worldwide, has recently come under scrutiny due to a significant vulnerability known as manifest confusion....

An Active Typosquat Attack in PyPI and NPM Discovered



 

python

Bitcoin Crypto Ethereum Hackers Malicious actor malware NPM Package PyPI Package python

An Active Typosquat Attack in PyPI and NPM Discovered

The typosquatting-based software supply chain threat, which targets explicitly Python and JavaScript programmers, is being warned off by Phylum security researchers.What is Typosquatting?Cybercriminals...

Discord Users Targeted by Malicious Npm Packages



 

User Security

Discord Info Stealer NPM Package Technology User Security

Discord Users Targeted by Malicious Npm Packages

Kaspersky researchers have unearthed yet another supply chain attack campaign employing multiple malicious npm packages, this time targeting Discord users to steal their...

NPM JavaScript Package Repository Targeted by Widespread Cryptomining Campaign



 

Technology

cryptocurrency cryptomining JavaScript NPM Package Technology

NPM JavaScript Package Repository Targeted by Widespread Cryptomining Campaign

Checkmarx researchers have unearthed a new large-scale cryptocurrency mining campaign targeting the NPM JavaScript package repository. The hacker behind this malicious...

Attack Against NPM Software Supply Chain Unearthed



 

URL

Data Breach JavaScript Malicious Code NPM Package Open Source Software Supply Chain Attack URL

Attack Against NPM Software Supply Chain Unearthed

Iconburst's most recent attack is described as a massive and well-planned effort to spread malicious Javascript packages distributed through the open-source NPM package...

Python Libraries Hacked AWS Data and Keys



 

Windows Defender

AWS Data Breach Firewall NPM Package Phishing Attacks PyPI Windows Defender

Python Libraries Hacked AWS Data and Keys

Sonatype researchers have found malicious Python packages that post your AWS credentials and user characteristics to a publicly accessible endpoint rather than just exploiting...

German Firms Targeted by Malicious NPM Packages



 

Vulnerabilities and Exploits

Geerman Firms JavaScript NPM Package Security Risk Vulnerabilities and Exploits

German Firms Targeted by Malicious NPM Packages

JFrog researchers have uncovered multiple malicious packages in the NPM registry particularly targeting several popular media, logistics, and industrial companies based...

Malicious Code Injected in Popular 'coa' and 'rc' Open Source Libraries



 

Open Source Software

Malicious Codes malware NPM Package Open Source Software

Malicious Code Injected in Popular 'coa' and 'rc' Open Source Libraries

Coa, a popular library from npm, a manager for the JavaScript programming language, has been hijacked by hackers who published new versions equipped with password-stealing...

Critical Flaws in NPM Package Patched by Node.js Developers



 

Vulnerabilities and Exploits

JavaScript Node.js NPM Package Vulnerabilities and Exploits

Critical Flaws in NPM Package Patched by Node.js Developers

Node.js maintainers have launched a major update to the npm package "tar" (aka node-tar) that resolves five critical safety flaws, including some that possess a remote code...

Page 1 of 212Last

Search This Blog

Sections

Popular Posts

Blog Archive

Labels

About Me

Showing result(s) for

Popular Posts

Pages

Menu Item