RuntimeBroker: an npm Typosquat Plants a 40-Chain Crypto-Clipper as a Cross-OS \”System Runtime Helper”\
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
AuditorTrap: A 22-Package Fake Crypto Security Guild on npm With Two Parallel Payloads
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
PhantomBot: A Typosquat Campaign That Pivoted From Credential Theft to a Turnkey Botnet Kit
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
AWS Lambda npm Dependency Confusion Attack: The 24712-pl Campaign
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
alone5511 npm Dependency Confusion Attack
An npm dependency confusion attack used eight malicious packages to fingerprint hosts and send RCE telemetry to Telegram.
EVM/DeFi npm Typosquatting Attack Steals Developer Keys
A npm typosquatting attack used six malicious EVM/DeFi packages to steal developer keys, wallets, secrets, and .env files.
FauxCode: Reverse-Engineered Claude Code Routes Through Attackers
FauxCode Claude Code npm malware used fake CLI packages to intercept API traffic through CA-bundle MITM and base URL hijacking.
DevTap npm Typosquatting Attack: Six Malicious Packages Target Developer Workstations
DevTap npm typosquatting attack used six malicious packages to spy on developer workstations and abuse npm trust.
Axios npm Compromise: What Happened, Who Is Affected, and How to Prevent It
Xygeni identifies Nyx: a sophisticated npm Infostealer hijacking Discord and crypto wallets using advanced runtime decryption.
LiteLLM Attack: How Xygeni Stops Secret Exposure Fast
LiteLLM attack exposed critical secrets. See how Xygeni detects, verifies, and revokes credentials before attackers use them.
LiteLLM Supply Chain Attack: How TeamPCP Backdoored AI Infrastructure
Explore the security breach of LiteLLM, affecting millions of users with multi-stage payloads and devastating consequences.
New npm Infostealer Discovery: Nyx Stealer Hijacks Discord Sessions
Xygeni identifies Nyx: a sophisticated npm Infostealer hijacking Discord and crypto wallets using advanced runtime decryption.