North Korean-linked campaign publishes 26 malicious npm packages hiding C2 in Pastebin, deploying credential stealers & RAT ...

The module targets Claude Code, Claude Desktop, Cursor, Microsoft Visual Studio Code (VS Code) Continue, and Windsurf. It also harvests API keys for nine large language models (LLM) providers: ...

Attackers used “technical assessment” projects with repeatable naming conventions to blend in cloning and build workflows, ...

网络安全研究人员披露了一项名为"沙虫模式"的活跃供应链蠕虫攻击活动，该活动利用至少19个恶意npm包来实施凭据收集和加密货币密钥窃取。