Similar to This
Previous
Hugging Face malware campaign returns to hijack GPUs for crypto mining: A crypto-mining campaign abusing Hugging Face models returned days after takedown ...
bleepingcomputer.com/news/security/hugging-face-malware-campaign-returns-to-hijack-gpus-for-crypto-mining/

Gamers hunting for PS5 emulators on GitHub are downloading malware instead: A cleanup script deletes the malware's own files, making the intrusion harder for the ...
techspot.com/news/114376-gamers-hunting-ps5-emulators-actually-downloading-malware-instead.html

Fake PS5 Emulators On GitHub Are Spreading Password-Stealing Malware: This is according to the threat research arm of NordVPN.
engadget.com/2299912/fake-ps5-emulators-on-github-are-spreading-password-stealing-malware/

Attackers Hide Malware Behind Signed ChatGPT and Claude Binaries: Attackers have used fake ChatGPT and Claude projects to distribute Yoba malware
infosecurity-magazine.com/news/attackers-hide-malware-behind/

Fake ChatGPT and Claude apps hide malware next to signed installers: Fake desktop apps for ChatGPT and Claude are hosted on GitHub and rank high in Google ...
notebookcheck.net/Fake-ChatGPT-and-Claude-apps-hide-malware-next-to-signed-installers.1437134.0.html

Fake PS5 emulators are being used to steal gamers' passwords — two well-known GitHub repos, including popular AnyPS5, get hit ...
tomshardware.com/tech-industry/cyber-security/fake-ps5-emulators-are-being-used-to-infect-gamers-computers-with-password-scraping-malware-two-well-known-github-repos-including-anyps5-hit

Paid articlePaywallInfostealer Rapuncel: Hackers disguise new malware as GitHub repos: A malware campaign is currently using fake GitHub repositories to spread the new infostealer ...
winfuture.de/news,161402.html

Massive NPM supply chain attack is yet again ravaging hundreds of software packages
cybernews.com/security/npm-supply-chain-attack-shai-hulud-worm/

Nearly 300 GitHub repos pose as legit software to push malware: A threat actor has published hundreds of fake GitHub repositories impersonating legitimate ...
bleepingcomputer.com/news/security/nearly-300-github-repos-pose-as-legit-software-to-push-malware/

AI coding agents can be tricked into installing malware via 'clean' GitHub repositories — Mozilla's 0din team shows how Claude Code can be ...
tomshardware.com/tech-industry/cyber-security/ai-coding-agents-can-be-tricked-into-installing-malware-via-clean-github-repositories-mozillas-0din-team-shows-how-claude-code-can-be-exploited-by-its-own-helpfulness

GitHub disables Microsoft repos pushing password-stealing malware: Microsoft removed 73 repositories across its Azure, microsoft, Azure-Samples ...
bleepingcomputer.com/news/security/github-disables-microsoft-repos-pushing-password-stealing-malware/

Claude Code leak used to push infostealer malware on GitHub: Threat actors are exploiting the recent Claude Code source code leak by using fake GitHub ...
bleepingcomputer.com/news/security/claude-code-leak-used-to-push-infostealer-malware-on-github/

Fake VS Code alerts on GitHub spread malware to developers: A large-scale campaign is targeting developers on GitHub with fake Visual Studio Code (VS Code) ...
bleepingcomputer.com/news/security/fake-vs-code-alerts-on-github-spread-malware-to-developers/

GlassWorm malware hits 400+ code repos on GitHub, npm, VSCode, OpenVSX: The GlassWorm supply-chain campaign has returned with a new, coordinated attack that ...
bleepingcomputer.com/news/security/glassworm-malware-hits-400-plus-code-repos-on-github-npm-vscode-openvsx/

WebRAT malware spread via fake vulnerability exploits on GitHub: The WebRAT malware is now being distributed through GitHub repositories that claim to host ...
bleepingcomputer.com/news/security/webrat-malware-spread-via-fake-vulnerability-exploits-on-github/

Critical WSUS flaw in Windows Server now exploited in attacks: Attackers are now exploiting a critical-severity Windows Server Update Service (WSUS) ...
bleepingcomputer.com/news/security/hackers-now-exploiting-critical-windows-server-wsus-flaw-in-attacks/

Next