09 Jun SeedSweep: Ten Crypto-Themed npm Packages That Only Run When No One Is Watching
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident....
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident....
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident....
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident....
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident....
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident....
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident....
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident....
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident....
An npm dependency confusion attack used eight malicious packages to fingerprint hosts and send RCE telemetry to Telegram....
A npm typosquatting attack used six malicious EVM/DeFi packages to steal developer keys, wallets, secrets, and .env files....
FauxCode Claude Code npm malware used fake CLI packages to intercept API traffic through CA-bundle MITM and base URL hijacking....
DevTap npm typosquatting attack used six malicious packages to spy on developer workstations and abuse npm trust....