Hacker Pwns Programmer, Infects Widely Used Software With Malware:
The malware was found in 18 npm packages that together are usually downloaded over 2 billion ...
pcmag.com/news/hacker-pwns-programmer-infects-widely-used-software-with-malware
Story Details
| Last Updated | |
| Total Articles | 3 |
Main Topics
software that is intentionally hostile, intrusive, or damaging to a computer or network
social network of individuals who interact through specific social media
News on this topic
Hacker Pwns Programmer, Infects Widely Used Software With Malware: The malware was found in 18 npm packages that together are usually downloaded over 2 billion ...
uk.pcmag.com/security/159966/hacker-pwns-programmer-infects-widely-used-software-with-malware
Similar to This
Previous
dlvr.it May 19
Shai-Hulud copycat hits another npm package: Plus three other stealers in three other packages, all from the same scumbag
theregister.com/cyber-crime/2026/05/18/shai-hulud-copycat-hits-another-npm-package/5242180
securityaffairs.com May 19
Shai-Hulud worm copycats emerge after source code leak: Shai-Hulud worm copycats are already attacking NPM developers after its source code leaked ...
securityaffairs.com/192366/malware/shai-hulud-worm-copycats-emerge-after-source-code-leak.html
dlvr.it May 01
The never-ending supply chain attacks worm into SAP npm packages, other dev tools
theregister.com/2026/04/30/supply_chain_attacks_sap_npm_packages/
Bitwarden CLI npm package compromised to steal developer credentials: The Bitwarden CLI was briefly compromised after attackers uploaded a malicious ...
bleepingcomputer.com/news/security/bitwarden-cli-npm-package-compromised-to-steal-developer-credentials/
Hackers compromise Axios npm package to drop cross-platform malware: Hackers hijacked the npm account of the Axios package, a JavaScript HTTP client with 100M+ ...
bleepingcomputer.com/news/security/hackers-compromise-axios-npm-package-to-drop-cross-platform-malware/
Hacker Tries to Spread Malware to Millions by Hitting 'Axios NPM' Software: Axios functions as pre-built software that a developer can easily incorporate into a ...
uk.pcmag.com/security/164160/hacker-tries-to-spread-malware-to-millions-by-hitting-axios-npm-software
Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets: The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting ...
bleepingcomputer.com/news/security/shai-hulud-20-npm-malware-attack-exposed-up-to-400-000-dev-secrets/
Over 300 npm packages compromised by self-replicating worm: A new piece of malware is spreading through the popular tinycolor NPM library and more than 300 other ...
neowin.net/news/over-300-npm-packages-compromised-by-self-replicating-worm/
Largest NPM attack in crypto history stole less than $50: SEAL: Less $50 worth of crypto has been stolen from the large-scale JavaScript libraries attack on ...
cointelegraph.com/news/large-scale-npm-attack-compromised-less-50-dollars
dlvr.it Aug 27 25
Nx NPM packages poisoned in AI-assisted supply chain attack: : Stolen dev credentials posted to GitHub as attackers abuse CLI tools for recon
theregister.com/2025/08/27/nx_npm_supply_chain_attack/
Newly discovered WinRAR exploit linked to Russian hacking group, can plant backdoor malware — zero day hack requires manual update to fix
tomshardware.com/tech-industry/cyber-security/newly-discovered-winrar-exploit-linked-to-russian-hacking-group-can-plant-backdoor-malware-zero-day-hack-requires-manual-update-to-fix
Still using WinRAR? It might be time for an update, as a zero-day vulnerability is being 'exploited in the wild in the guise of job application ...
pcgamer.com/software/security/still-using-winrar-it-might-be-time-for-an-update-as-a-zero-day-vulnerability-is-being-exploited-in-the-wild-in-the-guise-of-job-application-documents/
How one programmer broke the internet by deleting a tiny piece of code: A man in disrupted web development around the world by deleting 11 lines of code
qz.com/646467/how-one-programmer-broke-the-internet-by-deleting-a-tiny-piece-of-code
Printer manufacturer infected customer PCs for months: Purchasing computer peripherals like printers should be a relatively safe experience. However ...
techspot.com/news/107966-printer-manufacturer-infected-customer-pcs-months.html
Yes, there's an npm package called @(-.-)/env and some others like it: Strangely named npm packages like -, @!-!/-, @(-.-)/env, and --hepl continue to exist ...
bleepingcomputer.com/news/technology/yes-theres-an-npm-package-called-env-and-some-others-like-it/
npm packages hide TurkoRAT malware in what looks like a NodeJS EXE: Researchers have discovered multiple npm packages named after NodeJS libraries that even pack ...
bleepingcomputer.com/news/security/npm-packages-hide-turkorat-malware-in-what-looks-like-a-nodejs-exe/
Next