40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials Cyber News September 16, 2025 Share FacebookTwitterPinterestWhatsApp Over 40 npm packages trojanized to steal GitHub and cloud credentials via bundle.js malware BladeOne Search Latest articles Google uncovers malware using LLMs to operate and evade detection November 5, 2025 Microsoft Hyper-V harnessed for stealthy, persistent malware compromise November 5, 2025 NGate Malware Lets Attackers Withdraw Cash from ATMs Using Stolen Cards November 5, 2025 Google Uncovers PROMPTFLUX Malware That Uses Gemini AI to Rewrite Its Code Hourly November 5, 2025 Previous articleMassive Supply Chain Attack Hijacks ctrl/tinycolor With 2 Million Downloads and Other 40 NPM PackagesNext articleOpen Source CyberSOCEval Sets New Benchmark for AI in Malware Analysis and Threat Intelligence Related articles CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence Cyber News November 5, 2025 National cyber ethics module to be rolled out in schools from January 2026 Cyber News November 5, 2025 XLoader Malware Analyzed Using ChatGPT’s, Breaks RC4 Encryption Layers in Hours Cyber News November 5, 2025