Tsundere botnet spreads via MSI and PowerShell installers, using Ethereum-based C2 rotation and game-themed lures to target ...
Sha1-Hulud malware is an aggressive npm supply-chain attack compromising CI/CD and developer environments. This blog addresses frequently asked questions and advises cloud security teams to ...
While the September 2025 Shai-Hulud attack focused primarily on credential harvesting and self-propagation, this new variant ...
The latest version also executes malicious code during the preinstall phase, and is bigger and faster than the first wave, ...
Shai-Hulud malware infiltrates 490 NPM packages, stealing API keys and credentials from ENS and major crypto development ...
The attackers have learned from their mistakes and have now developed a more aggressive version of the worm. It has already ...
How-To Geek on MSN
NPM packages are infected with malware, again
Shai Hulud v2 infected 500+ npm packages (700+ versions) and spilled into Java/Maven — yikes. Compromised packages run a ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback