Get all your news in one place.

100's of premium titles.
One app.

Get all your news in one place.

100's of premium titles. One news app.

SHOCKING: Socket - What They Never Told You

Fake Go DNS scanner spread malware through over 200 GitHub repos — 'Operation Muck and Load' has published 700 malicious modules since January

The module published its first version on January 24 this year and has since accumulated more than 1,200 versions.

Tom’s Hardware

Compromised Red Hat npm packages downloaded over 80,000 times in one week – supply chain attack still ongoing

Compromised Red Hat npm packages downloaded over 80,000 times in one week – supply chain attack still ongoing

Security researchers spotted a new campaign using the same methods as TeamPCP.

What is Mini Shai-Hulud npm supply chain attack, and was Microsoft and Socket hit by malware? Full explainer on npm malware spread

What is Mini Shai-Hulud npm supply chain attack, and was Microsoft and Socket hit by malware? Full explainer on npm malware spread

What is Mini Shai-Hulud npm supply chain attack, and was Microsoft and Socket hit by malware? A new npm supply chain attack hit hundreds of packages linked to the @antv ecosystem. Attackers used a compromised maintainer account to publish malicious versions that stole credentials and spread across repositories. Microsoft and…

The Economic Times

From analysis to the latest developments in health,
read the most diverse news in one place.

inkl

Google Chrome users beware — experts warn over 100 Web Store extensions found stealing user data from thousands of accounts

All extensions seem to have been made by a single actor, possibly of Russian origin.

108 malicious Chrome extensions found stealing data and injecting ads into every page you visit — delete them right now

Security researchers have uncovered a new coordinated campaign which uses malicious extensions to steal user data and hijack browsing sessions.

GitHub developers targeted by fake VS Code alerts spreading malware

GitHub 'Discussions' section is being manipulated into delivering malware to software devs.

Dangerous new malware targets macOS devices via OpenVSX extensions - here's how to stay safe

GlassWorm malware is expanding to open source platforms, targeting macOS users with infostealers.

inkl

Read news from The Economist, FT, and more,
with one subscription

These Chrome extensions spoof Workday, NetSuite, and others to trick victims - here's what to look for

These Chrome extensions spoof Workday, NetSuite, and others to trick victims - here's what to look for

Five extensions were found targeting enterprises and multinational organizations, taking over valuable accounts.

Industrial computing systems at risk from "time bombs " in malicious NuGet packages

Industrial computing systems at risk from "time bombs " in malicious NuGet packages

Researchers found malicious packages on NuGet designed to sabotage processes in two years.

Dangerous npm packages are targeting developer credentials on Windows, Linux and Mac - here's what we know

Dangerous npm packages are targeting developer credentials on Windows, Linux and Mac - here's what we know

At least 10 npm packages were uploaded in early July 2025 and were downloaded almost 10,000 times.

North Korean hackers release malware-ridden packages into npm registry

North Korean hackers release malware-ridden packages into npm registry

A second wave of tainted packages was spotted on npm, likely part of a larger campaign.

NPM users warned dozens of malicious packages aim to steal host and network data

NPM users warned dozens of malicious packages aim to steal host and network data

A total of 60 packages were recently removed from NPM.

Dangerous Linux wiper malware hidden within Go modules on GitHub

Dangerous Linux wiper malware hidden within Go modules on GitHub

Three modules found hosting very destructive malware targeting Linux systems.

Gmail servers hijacked by malicious PyPI packages to spread havoc - here's how to stay safe

Gmail servers hijacked by malicious PyPI packages to spread havoc - here's how to stay safe

Researchers found multiple malicious PyPI packages, some several years old, but still a threat.

Get all your
news in one place.

100's of premium titles.
One news app.

Malicious Python packages are stealing vital data, and have been downloaded thousands of times already

Two malicious packages are targeting Bitcoin developers, and another hitting WooCommerce stores.

A cracked malicious version of a Go package lay undetected online for years

Someone's been abusing GitHub's Go Module Mirror service, allowing the attack to persist.

1

People

From analysis to the latest developments in health,
read the most diverse news in one place.

inkl

Organisations

BleepingComputer

the Chrome Web Store

inkl

Read news from The Economist, FT, and more,
with one subscription

Topics

Places

415,022 stories

Fourteen days free

Download the app

One app. One membership.
100+ trusted global sources.

Download on the AppStore

Get it on Google Play