Risky Business: The Anti-Proctoring Packages That Delete Themselves

Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
JavacDoor: A Maven Artifact That Ran During Compilation, Not Installation

Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
QuietPolyfill: An NPM dropper that resurrected

Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
Rogue by Design: How a Sandboxed Pre-Release Model Jailbroke Itself and Hacked Hugging Face to Cheat an Exam

Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
PointBlank: a fully-featured Python RAT that ran its command channel through a free note-hosting service

Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
PhantomSync: eight crypto-developer npm packages hide a delayed, self-persisting dropper

Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
FauxUV: fake PyPI uv helpers that open an unauthenticated Jupyter server to the internet

Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
forge-jsxy: The npm Infostealer That Keeps Changing Its Name

Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
GhostTracker: an npm trojan that rebranded within hours of takedown — and kept the same C2
Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
SkillLeak: A Browser-Credential Decryptor Delivered Through an MCP Skill

Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
Keys to use AI cybersecurity, Zero Trust SDLC, how to secure AI-generated code, AI Security

Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.
What Is an AI Inventory? A Practical Guide to AI Asset Discovery, AI-BOM and Shadow AI

Uncover the details of The 24712-pl Campaign and the zero-dependency packages exploited during a security incident.