Yanuki
Security / Malware
The software development ecosystem is facing increased threats from malicious actors. Recent incidents involve a VS Code extension with ransomware capabilities and NPM packages distributing information-stealing malware, highlighting the imp...
Security / Supply Chain
A large-scale supply chain attack has compromised NPM packages, impacting over 2.6 billion weekly downloads. Attackers injected malicious code into popular packages by compromising maintainer accounts through phishing, leading to the hijack...
Cybersecurity / Malware
Cybersecurity researchers have uncovered malicious NPM packages that use Ethereum smart contracts to hide malware, marking a new trend in software supply chain attacks. This technique allows attackers to bypass traditional security measures...
