Topic

#malicious packages

4 articles found

North Korean Hackers Exploit npm to Target Developer Credentials

Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft. According to JFrog, the packages "rollup-packages-polyfill-core" and "rollup-runtime-polyfill-core" mimic the legiti

#npm security#north korea hackers#developer credentials#malicious packages#india tech security

· · Bleeping Computer

Malicious PyPI Packages Target Telegram Bot Developers

A campaign active since last November has been targeting Python developers building Telegram bots with trojanized Pyrogram forks that allow attackers to read arbitrary files on compromised servers. [...]

#malicious packages#pypi security#telegram bots#open-source threats#india tech market

· · Dark Reading

Malicious OpenClaw Skills Expose AI Supply Chain Risks

OpenClaw removed five packages from ClawHub, its skills marketplace, that bypassed security checks even though they included infostealers and other threats.

#malicious packages#ai security#openclaw#india tech#ai supply chain

· · Dev.to

34 Malicious Packages Target Solana Developers: Urgent Alerts

Socket Security just published research on TrapDoor malware: 34 malicious packages targeting developers building on Solana, Aptos, and Sui. If you've installed any npm or PyPI packages from these ecosystems recently, your wallet may already be at risk even if nothing looks wrong yet. How it works: T

#malicious packages#solana#blockchain security#india tech#developer safety