Exploits

A potential npm supply chain disaster was averted in record time after attackers took over a verified developer’s credentials. On September 8, Josh Junon, a...

Malware Hidden in Popular JavaScript Libraries Targets Crypto Users, But Just Steals $50 federico Published: September 9, 2025 12:35 pm Updated: September 9, 2025 12:35 pm Table of Contents TL;DR Hackers compromised...

New malware hits exposed Docker APIs, evolving from cryptomining to persistent root access and advanced evasion tactics. 

An escalating npm supply chain attack has compromised dozens of foundational JavaScript packages to spread malware and drain crypto wallets. 

Pierluigi Paganini September 09, 2025 A new ransomware group, named LunaLock, appeared in the threat landscape with a unique cyber extortion technique, threatening to...

CISOs told the best defense is ‘boring cyber hygiene practices.’ 

The maintainer for several highly popular npm debug and chalk packages has revealed he was recently the victim of a phishing attack, which led...

Aikido Security Ltd. today disclosed what is being described as the largest npm supply chain compromise to date, after attackers injected malware into 18...

“Dynamic & Spot-On” – Yulia Tereshchenko on Finance Magnates “Dynamic &...