#Malware

GitHub's Malware Problem Isn't a Capability Gap

Ten thousand trojan repos vanished in hours, then came right back — and AI agents are now the targets.

Article · 2w ago3

CrashStealer Proves Notarized Mac Malware Is Here

A Gatekeeper-cleared dropper and native C++ stealer raise the bar for defending developer Macs.

Article · 1mo ago0

How Fake Commit Activity Masked a Massive Go Malware Campaign

A sophisticated campaign weaponized Go pseudo-versions and automated commits to distribute Windows remote access trojans.

Article · 1mo ago5

The OIDC Double-Edge: Inside the Injective SDK Backdoor

A compromised maintainer account and trusted publishing pipeline expose the limits of passive dependency scanning.

Article · 1mo ago0

Beyond Code: How StegoAd Hid Malware in Fonts and Images

Microsoft's removal of 119 Edge extensions exposes how threat actors bypass static analysis by weaponizing ordinary asset files.

Article · 1mo ago2

Node.js as a Portable Attack Vector in Phishing Campaigns

Attackers are dropping standalone Node.js runtimes into user space to bypass security controls and run persistent implants.

Article · 1mo ago0

Miasma Proves Trusted Publishing Can Backfire Spectacularly

The self-propagating Miasma worm exploits GitHub Actions OIDC and phantom build files to turn security standards against developers.

Article · 1mo ago0

The AUR Namespace Trap: Lessons from the Atomic Arch Attacks

The recent compromise of over 1,500 AUR packages exposes the structural danger of flat namespaces in developer-focused package repositories.

Article · 1mo ago5

North Korean Hackers Poison Mastra AI in npm Attack

The compromise of the Mastra AI framework exposes critical gaps between CI/CD provenance and registry-level publish permissions.

Article · 1mo ago1

The GitHub Clone Farm That Beat VirusTotal

A 10,000-repo Trojan campaign weaponizes GitHub's trust signals, search ranking and commit history — and the next mark is your AI agent.

Article · 1mo ago2

Steam Workshop Wallpapers Exploited to Run Malicious Binaries

Attackers leverage Wallpaper Engine's application feature to execute backdoors and hijack active user sessions.

Article · 1mo ago5

How a Fake LinkedIn Job Offer Delivered a Node Backdoor

Attackers are using stolen identities and malicious npm lifecycle scripts to target developers during the recruitment process.

Article · 1mo ago4

Arch's AUR Malware Sprawl Hits 1,579 Packages

A user-repository compromise that started at 400 packages ballooned past 1,500 before Arch developers purged the malicious commits.

News · 1mo ago6

AUR Supply Chain Attack Delivers eBPF Rootkit and Infostealer

A spoofed maintainer adopted over 400 Arch User Repository packages, injecting preinstall scripts that fetch malicious NPM payloads.

News · 2mos ago0

Inside 'The Gentlemen' Ransomware: TTPs, AI, and Network Hardening

Understand the technical tactics of this rapidly expanding RaaS group to defend your edge devices and Active Directory.

Article · 2mos ago2