malicious packages - Robuta Search

https://www.bleepingcomputer.com/news/security/glassworm-malware-returns-in-third-wave-of-malicious-vs-code-packages/ Glassworm malware returns in third wave of malicious VS Code packages The Glassworm campaign, which first emerged on the OpenVSX and Microsoft Visual Studio marketplaces in October, is now in its third wave, with 24 new packages... glassworm malware returns wave https://www.csoonline.com/article/4050956/malicious-npm-packages-use-ethereum-blockchain-for-malware-delivery.html Malicious npm packages use Ethereum blockchain for malware delivery | CSO Online Sep 3, 2025 - Ethereum smart contracts used to hide URL to secondary malware payloads in an attack chain triggered by a malicious GitHub repo. malicious npm packages use cso Sponsored https://www.kupid.ai/ Experience the Future of AI Chat with KupidAI https://checkmarx.com/the-hidden-threat-of-malicious-open-source-packages/ Stop malicious packages and protect your software supply chain Nov 3, 2025 - Discover how to block malicious packages before they infiltrate your apps. Gain visibility, secure open-source code, and protect your software supply chain. software supply chain stop https://pastebin.com/P92bU5fb?source=archive Manipulated File in Malicious NPM Packages - Pastebin.com Pastebin.com is the number one paste tool since 2002. Pastebin is a website where you can store text online for a set period of time. malicious npm packages file https://checkmarx.com/resources/the-hidden-threat-of-malicious-open-source-packages-exec-summary/ The Hidden Threat of Malicious Open-Source Packages: Exec Summary hidden threat open source exec https://www.zscaler.com/blogs/security-research/malicious-npm-packages-deliver-nodecordrat Malicious NPM Packages Deliver NodeCordRAT | ThreatLabz Jan 7, 2026 - ThreatLabz identified malicious NPM packages that deliver NodeCordRAT, which performs credential theft and steals cryptocurrency wallet data. malicious npm packages deliver https://www.infoworld.com/article/4086337/malicious-npm-packages-contain-vidar-infostealer.html Malicious npm packages contain Vidar infostealer | InfoWorld Nov 6, 2025 - Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages. malicious npm packages contain https://www.csoonline.com/article/4115417/malicious-npm-packages-target-n8n-automation-platform-in-a-supply-chain-attack.html Malicious npm packages target the n8n automation platform in a supply chain attack | CSO Online Jan 12, 2026 - Researchers discovered malicious npm packages posing as n8n integrations, exfiltrating OAuth tokens and API keys from enterprise workflows. malicious npm packages target https://feedly.com/ti-essentials/posts/from-malicious-packages-to-actionable-intelligence-with-opensourcemalware How to Extract Threat Intelligence from Malicious Packages | TI Essentials | Feedly Dec 18, 2025 - How CTI teams can extract IoCs from software supply chain attacks that traditional tools miss threat intelligence extract ti https://www.csoonline.com/article/4082195/malicious-packages-in-npm-evade-dependency-detection-through-invisible-url-links-report.html Malicious packages in npm evade dependency detection through invisible URL links: Report | CSO... Oct 30, 2025 - Researchers outline how the PhantomRaven campaign exploits hole in npm to enable software supply chain attacks. malicious packages npm evade url Sponsored https://www.xlovecam.com/en/ Best live sex cam show and free live chat | Xlovecam Chat with hundreds of English and foreign Sexy WebCam Girls ❤️, Discover their Live Cam XXX Show for Free, Without Registration and in HD quality at XloveCam® https://arstechnica.com/security/2025/10/npm-flooded-with-malicious-packages-downloaded-more-than-86000-times/ NPM flooded with malicious packages downloaded more than 86,000 times - Ars Technica Oct 30, 2025 - Packages downloaded from NPM can fetch dependencies from untrusted sites. malicious packages npm flooded https://www.developer-tech.com/news/malicious-time-bomb-packages-on-nuget-target-databases-industry/ Malicious time bomb packages on NuGet target databases, industry Nov 7, 2025 - Security researchers have uncovered malicious packages on NuGet that act as time-delayed time bombs aimed at databases and industry systems. time bomb malicious packages https://safedep.io/malicious-npm-packages-hyatt-campaign/ Malicious npm Packages Impersonating Hyatt Internal Dependencies — Real-time Open Source Software... Three malicious npm packages disguised as Hyatt internal dependencies were discovered using install hooks to execute malicious payloads. All packages share... malicious npm packages hyatt https://github.com/safedep/vet GitHub - safedep/vet: Protect against malicious open source packages 🤖 Protect against malicious open source packages 🤖. Contribute to safedep/vet development by creating an account on GitHub. open source github safedep vet https://www.aikido.dev/blog/introducing-safe-chain Introducing Safe Chain: Stopping Malicious npm Packages Before They Wreck Your Project Safe-Chain by Aikido is a powerful tool to prevent installing any malicious package version by verifying each package with the Aikido Intel database and... malicious npm packages safe