Cyberveille
curated by Decio
Nuage de tags
Mur d'images
Quotidien
Rechercher
Flux RSS
Flux RSS
Daily Feed
Weekly Feed
Monthly Feed
tags
search
Malicious NPM Packages Exfiltrate Hundreds of Developer SSH Keys via GitHub
Dozens of npm Packages Caught Attempting to Deploy Reverse Shell
Developers Warned of Malicious PyPI, NPM, Ruby Packages Targeting Macs - SecurityWeek
Nascent Malware Campaign Targets npm, PyPI, and RubyGems Developers
An Ongoing Open Source Attack Reveals Roots Dating Back To 2021
Fake Roblox packages target npm with Luna Grabber information-stealing malware
Operation Brainleeches: Malicious npm packages fuel supply chain and phishing attacks
Hijacking S3 Buckets: New Attack Technique
Who Broke NPM?: Malicious Packages Flood Leading to Denial of Service
Phylum Detects Ongoing Typosquat/Ransomware Campaign in PyPI and NPM
Threat Alert: Private npm Packages Disclosed via Timing Attacks
Software Supply Chain Attackers; Organized, Persistent, and Operating for over a Year
npm Supply Chain Attack Targeting Germany-Based Companies
Sabotage: Code added to popular NPM package wiped files in Russia and Belarus | Ars Technica