North Korean actors deployed 197 new npm packages delivering evolved OtterCookie and GolangGhost malware through fake ...

A popular JavaScript cryptography library is vulnerable in a way which could allow threat actors to break into user accounts.

"As a new and significantly more aggressive wave of npm supply chain malware, Shai-Hulud 2 combines stealthy execution, ...

Sha1-Hulud malware is an aggressive npm supply-chain attack compromising CI/CD and developer environments. This blog addresses frequently asked questions and advises cloud security teams to ...

This week, a recently fixed Oracle flaw is being actively exploited, Shelly tackled Pro 4PM DoS bug, "Shai-Hulud 2.0" hit npm ...

While the September 2025 Shai-Hulud attack focused primarily on credential harvesting and self-propagation, this new variant ...

The attackers have learned from their mistakes and have now developed a more aggressive version of the worm. It has already ...

A new version of the Shai-Hulud worm has infected hundreds of npm packages and caused disruption to global CI/CD workflows ...

Shai-Hulud malware infiltrates 490 NPM packages, stealing API keys and credentials from ENS and major crypto development ...

Fortnite Update 4.93 is now available for last-gen platforms, adding brand-new content, cosmetics, events, and so much more.

The latest version also executes malicious code during the preinstall phase, and is bigger and faster than the first wave, ...