JulesJacker: A Fake-PoC npm Worm That Impersonates Google’s Jules Agent — and Turns on the Sandbox Analyzing It
RuntimeBroker: an npm Typosquat Plants a 40-Chain Crypto-Clipper as a Cross-OS \”System Runtime Helper”\
Analyse van aanvallen Ectoplasm: npm install hooks that harvest AWS credentials behind a container-only trigger 12 juni 2026
Analyse van aanvallen SeedSweep: Ten Crypto-Themed npm Packages That Only Run When No One Is Watching 9 juni 2026
Analyse van aanvallen PairLoop: One npm Package, Seventy Versions, and a Hidden Windows Remote-Control Panel 5 juni 2026
Analyse van aanvallen ConsentMask: An npm Package That Wears a Telemetry Consent Banner Over Developer-Identity Harvesting 4 juni 2026
Analyse van aanvallen JulesJacker: A Fake-PoC npm Worm That Impersonates Google’s Jules Agent — and Turns on the Sandbox Analyzing It May 29, 2026
Analyse van aanvallen RuntimeBroker: an npm Typosquat Plants a 40-Chain Crypto-Clipper as a Cross-OS \”System Runtime Helper”\ May 22, 2026
Analyse van aanvallen AuditorTrap: A 22-Package Fake Crypto Security Guild on npm With Two Parallel Payloads May 21, 2026
Analyse van aanvallen PhantomBot: A Typosquat Campaign That Pivoted From Credential Theft to a Turnkey Botnet Kit May 18, 2026
