Slopsquatting Attacks: How an AI Mistake Became a New Way Into Your Software Supply Chain
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
forge-jsxy: The npm Infostealer That Keeps Changing Its Name
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
GhostTracker: an npm trojan that rebranded within hours of takedown — and kept the same C2
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
CryptoDAO Confusion: eleven npm packages, one payload, harvesting CI/CD and crypto-wallet secrets
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
Permission Slip: An npm “Authorized Research” Cover Story Hiding Cloud-Metadata Probes and SYSTEM Persistence
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
Ectoplasm: npm install hooks that harvest AWS credentials behind a container-only trigger
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
SeedSweep: Ten Crypto-Themed npm Packages That Only Run When No One Is Watching
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
PairLoop: One npm Package, Seventy Versions, and a Hidden Windows Remote-Control Panel
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
ConsentMask: An npm Package That Wears a Telemetry Consent Banner Over Developer-Identity Harvesting
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
JulesJacker: A Fake-PoC npm Worm That Impersonates Google’s Jules Agent — and Turns on the Sandbox Analyzing It
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.