Developer-Security

Tensorlake npm Package Hijacked to Spread Shai-Hulud Worm

Tensorlake npm Package Hijacked to Spread Shai-Hulud Worm

Oct 8, 2026 · 2 min read

North Korean Hackers Plant Malware in HashiCorp Terraform Registry

North Korean Hackers Plant Malware in HashiCorp Terraform Registry

Sep 24, 2026 · 1 min read

GitLab's Issue Email Token Lets Anyone Push Code as You

GitLab's Issue Email Token Lets Anyone Push Code as You

Sep 24, 2026 · 1 min read

Fake Twilio Bug-Bounty npm Package Steals Developer Credentials

Fake Twilio Bug-Bounty npm Package Steals Developer Credentials

Sep 23, 2026 · 1 min read

npm Malware Hides in Runtime to Bypass npm v12 Security Controls

npm Malware Hides in Runtime to Bypass npm v12 Security Controls

Sep 20, 2026 · 1 min read

LLM-Built PhantomRaven Stealer Targets Developer Credentials via npm

LLM-Built PhantomRaven Stealer Targets Developer Credentials via npm

Sep 19, 2026 · 1 min read

Plugin4Shell: AI Coding Agents Can Be Fed Malicious Plugins

Plugin4Shell: AI Coding Agents Can Be Fed Malicious Plugins

Sep 18, 2026 · 2 min read

Coder's Registry Hijacked to Deliver Credential-Stealing Terraform Modules

Coder's Registry Hijacked to Deliver Credential-Stealing Terraform Modules

Sep 3, 2026 · 1 min read

Iranian Hackers Lure Developers via Fake Coding Challenges

Iranian Hackers Lure Developers via Fake Coding Challenges

Sep 1, 2026 · 1 min read

Hackers Turn npm Into Free Phishing Host via Mirror Abuse

Hackers Turn npm Into Free Phishing Host via Mirror Abuse

Aug 26, 2026 · 1 min read

Rust arrayref Crate Poisoned With Infostealer in Supply Chain Attack

Rust arrayref Crate Poisoned With Infostealer in Supply Chain Attack

Aug 20, 2026 · 1 min read

Fake RubyGems Packages Steal Browser Credentials and Crypto Wallets

Fake RubyGems Packages Steal Browser Credentials and Crypto Wallets

Aug 18, 2026 · 1 min read

Fake Solidity VS Code Extensions Steal Crypto Wallets and Dev Keys

Fake Solidity VS Code Extensions Steal Crypto Wallets and Dev Keys

Aug 11, 2026 · 1 min read

77 fake VS Code extensions stole developer data on Open VSX

77 fake VS Code extensions stole developer data on Open VSX

Aug 5, 2026 · 1 min read

North Korea Hijacked debug and chalk npm Packages

North Korea Hijacked debug and chalk npm Packages

Jul 31, 2026 · 1 min read

Compromised joyfill npm Packages Install RAT on Import

Compromised joyfill npm Packages Install RAT on Import

Jul 29, 2026 · 1 min read

jscrambler npm Package Poisoned to Steal Developer Credentials

jscrambler npm Package Poisoned to Steal Developer Credentials

Jul 12, 2026 · 1 min read

Supply chain attack hijacks developer packages to steal credentials

Supply chain attack hijacks developer packages to steal credentials

May 24, 2026 · 1 min read

GlassWorm campaign abuses Open VSX extension dependencies in supply-chain attacks

GlassWorm campaign abuses Open VSX extension dependencies in supply-chain attacks

Mar 14, 2026 · 1 min read

1 2