Recently discovered malicious packages in npm and PyPI repositories threaten developers with sophisticated attacks targeting cryptocurrency wallets, development environments, and Discord applications. The threats include Solana wallet exploits that steal private keys, typosquatted packages...
A malicious npm package masquerading as an Ethereum smart contract vulnerability detector was discovered deploying Quasar RAT malware. The package uses sophisticated obfuscation and sandbox detection techniques. Additionally, a related study revealed widespread GitHub star manipulation, wi...
Security researchers discovered malicious npm packages and VSCode extensions targeting developers through sophisticated supply chain attacks. The threats include typosquatted versions of popular packages like typescript-eslint and @types/node, which deploy trojans and malicious payloads. T...
