dlvr.it May 27
Supply chain brain drain: npm attacker foolishly leaks own GitHub private token:
Script kiddies these days
theregister.com/cyber-crime/2026/05/27/supply-chain-brain-drain-npm-attacker-foolishly-leaks-own-github-private-token/5247424
Story Details
| Last Updated | |
| Total Articles | 1 |
Main Topics
umbrella term for technologies used to handle information and aid communication
retail outlets that share a brand and central management, and usually have standardized business methods and practices
Similar to This
Previous
CyberNews Aug 05
Massive NPM supply chain attack is yet again ravaging hundreds of software packages
cybernews.com/security/npm-supply-chain-attack-shai-hulud-worm/
Massive ChainDrop npm supply-chain attack infects hundreds of packages: Self-propagating malware named 'ChainDrop' has compromised more than 1 ...
bleepingcomputer.com/news/security/massive-chaindrop-npm-supply-chain-attack-infects-hundreds-of-packages/
github.com Jun 30
GitHub - ihearttokyo/chatgpt-wrapper: A small macOS wrapper for the ChatGPT website built with Electron and TypeScript.
github.com/ihearttokyo/chatgpt-wrapper
New IronWorm malware hits 36 packages in npm supply-chain attack: A new supply-chain attack has infected 36 packages on the Node Package Manager (npm) index with ...
bleepingcomputer.com/news/security/new-ironworm-malware-hits-36-packages-in-npm-supply-chain-attack/
dlvr.it May 27
CrowdStrike, Google shatter Glassworm botnet: Developer-targeted, supply-chain attacks all the rage these days
theregister.com/cyber-crime/2026/05/27/crowdstrike-google-shatter-glassworm-botnet/5247337
dlvr.it May 22
Megalodon chums the waters in 5.5K+ GitHub repo poisonings: Will Jason Statham save us?
theregister.com/security/2026/05/22/megalodon-chums-the-waters-in-55k-github-repo-poisonings/5245342
CyberNews May 22
Megalodon stalks over 5,000 GitHub repos in new assault on open source: Researchers have uncovered a massive "Megalodon" campaign compromising GitHub ...
cybernews.com/security/megalodon-github-5000-repos-backdooring-supply-chain-attack/
GitHub links repo breach to TanStack npm supply-chain attack: GitHub says the hackers who breached 3,800 internal repositories gained access via a malicious ...
bleepingcomputer.com/news/security/github-links-repo-breach-to-tanstack-npm-supply-chain-attack/
dlvr.it May 12
Cache-poisoning caper turns TanStack npm packages toxic: Six-minute supply chain blitz pushed 84 malicious versions with credential theft and disk-wiping code
theregister.com/cyber-crime/2026/05/12/cache-poisoning-caper-turns-tanstack-npm-packages-toxic/5238650
The New Stack Apr 12
How TeamPCP turned Aqua Security’s own Trivy scanner into a weapon against millions of developers
thenewstack.io/teampcp-trivy-supply-chain-attack/
The New Stack Mar 27
How TeamPCP turned Aqua Security’s own Trivy scanner into a weapon against millions of developers
thenewstack.io/teampcp-trivy-supply-chain-attack/
GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX: The GlassWorm supply-chain campaign has returned with a new, coordinated attack that ...
bleepingcomputer.com/news/security/glassworm-malware-hits-400-plus-code-repos-on-github-npm-vscode-openvsx/
github.com Mar 05
GitHub - ollls/ScrapChat: Contribute to ollls/ScrapChat development by creating an account on GitHub.
github.com/ollls/ScrapChat
github.com Mar 03
GitHub - Noah4ever/ai-chat-speed-booster: Speeds up large ChatGPT chats by loading only the most recent messages, keeping long conversations fast and ...
github.com/Noah4ever/ai-chat-speed-booster
github.com Feb 27
GitHub - thisnick/agent-wechat: RPA-based WeChat automation: RPA-based WeChat automation. Contribute to thisnick/agent-wechat development by creating an account ...
github.com/thisnick/agent-wechat
Shai-Hulud 2.0 NPM malware attack exposed up to 400,000 dev secrets: The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting ...
bleepingcomputer.com/news/security/shai-hulud-20-npm-malware-attack-exposed-up-to-400-000-dev-secrets/
New major npm attack: Hundreds of packages infected with self-replicating malware
heise.de/news/Neuer-NPM-Grossangriff-Selbst-vermehrende-Malware-infiziert-Dutzende-Pakete-10651111.html
dlvr.it Aug 27 25
Nx NPM packages poisoned in AI-assisted supply chain attack: : Stolen dev credentials posted to GitHub as attackers abuse CLI tools for recon
theregister.com/2025/08/27/nx_npm_supply_chain_attack/
Next