Ten typosquatted npm packages (Jul 4, 2025) delivered a 24MB PyInstaller info stealer using 4 obfuscation layers; ~9,900 ...

Cybersecurity, Cyber Espionage, Malware, PlugX, Data Breach, Vulnerability, Phishing, European Union, Threat Intelligence ...

Attackers are exploiting a major weakness that has allowed them access to the NPM code repository with more than 100 ...

Attackers are using the open-source red-team tool RedTiger to build an infostealer that collects Discord account data and ...

The typosquatted packages auto-execute on installation, fingerprint victims by IP, and deploy a PyInstaller binary to harvest ...

Here is a recap of what happened in the search forums today, through the eyes of the Search Engine Roundtable and other search forums on the web. Google and Microsoft announced earnings and they both ...

An advanced malware campaign on the npm registry steals the very keys that control enterprise cloud infrastructure.