Unofficial Postmark MCP npm silently stole users&#039; emails:

bleepingcomputer.com/news/security/ai-coding-agents-hijacked-using-agentsmd-file-in-downloads-folder/

Credibility A−

Oct 25

AI coding agents hijacked using AGENTS.md file in Downloads folder: Researchers found a malicious AGENTS markdown instruction file in a customer's Downloads ...

github.com/ChrystianSchutz/ThreadShelf

github.com Sep 13

GitHub - ChrystianSchutz/ThreadShelf: Local-first archive, semantic search, and continuation for AI conversations across ChatGPT, Claude, Gemini, Grok ...

bleepingcomputer.com/news/security/hackers-abuse-npm-mirrors-to-host-phishing-redirect-pages/

Aug 25

Hackers abuse npm mirrors to host phishing redirect pages: Threat actors are abusing npm and its mirrors to host malicious HTML pages that impersonate Cloudflare ...

bleepingcomputer.com/news/security/hackers-backdoor-jscrambler-npm-package-with-infostealer-malware/

Jul 13

Hackers backdoor Jscrambler npm package with infostealer malware: The Jscrambler client-side web security company disclosed that a threat actor published a ...

github.com/trakkr-aisearch/openai-ads-mcp

github.com Jun 22

GitHub - trakkr-aisearch/openai-ads-mcp: OpenAI Ads and ChatGPT Ads MCP Server for the Advertiser API

theregister.com/security/2026/05/29/14-malicious-npm-packages-impersonated-opensearch-elasticsearch-libraries/5248792

dlvr.it May 29

14 malicious npm packages impersonated OpenSearch, Elasticsearch libraries: And then Microsoft busted them all

venturebeat.com/security/npm-sigstore-provenance-stolen-identity-audit-grid-2026

VentureBeat

May 23

npm supply chain: valid certificates, stolen accounts: Stolen credentials produced valid Sigstore certificates, clearing 633 malicious npm packages — one of ...

securityaffairs.com/192366/malware/shai-hulud-worm-copycats-emerge-after-source-code-leak.html

0 0

securityaffairs.com May 19

Shai-Hulud worm copycats emerge after source code leak: Shai-Hulud worm copycats are already attacking NPM developers after its source code leaked ...

bleepingcomputer.com/news/security/bitwarden-cli-npm-package-compromised-to-steal-developer-credentials/

iru.com Apr 29

MiniRAT: A Go-based macOS RAT delivered via malicious npm package: Breakdown of MiniRAT, a Go-based macOS RAT delivered via malicious npm package ...

Apr 23

Bitwarden CLI npm package compromised to steal developer credentials: The Bitwarden CLI was briefly compromised after attackers uploaded a malicious ...

2 similar articles

github.com Apr 05

GitHub - google-gemini/gemini-cli: An open-source AI agent that brings the power of Gemini directly into your terminal.

github.com/google-gemini/gemini-cli

theregister.com/2025/12/22/whatsapp_npm_package_message_steal/

dlvr.it Dec 22 25

Poisoned WhatsApp API package steals messages and accounts: : And it's especially dangerous because the code works

bleepingcomputer.com/news/security/everything-blocks-devs-from-removing-their-own-npm-packages/

Jan 04 24

'everything' blocks devs from removing their own npm packages: Over the holidays, the npm package registry was flooded with more than 3,000 packages ...

bleepingcomputer.com/news/security/blockchain-devs-wallet-emptied-in-job-interview-using-npm-package/

Dec 28 23

Blockchain dev's wallet emptied in "job interview" using npm package

bleepingcomputer.com/news/technology/yes-theres-an-npm-package-called-env-and-some-others-like-it/

Sep 02 23

Yes, there's an npm package called @(-.-)/env and some others like it: Strangely named npm packages like -, @!-!/-, @(-.-)/env, and --hepl continue to exist ...

bleepingcomputer.com/news/security/npm-ecosystem-at-risk-from-manifest-confusion-attacks/

Jun 28 23

NPM ecosystem at risk from “Manifest Confusion” attacks: The NPM (Node Package Manager) registry suffers from a security lapse called "manifest confusion ...