A massive, self-replicating GlassWorm supply-chain attack has compromised hundreds of code repositories and extensions on ...
The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...
60 packages have been discovered in the NPM index that attempt to collect sensitive host and network data and send it to a Discord webhook controlled by the threat actor. According to Socket’s Threat ...
Cryptopolitan on MSN
Cybersecurity researchers uncover GhostLoader malware hidden in fake OpenClaw npm package
A malicious npm package disguised as a legitimate AI tool to install the virally popular OpenClaw, but designed to steal system passwords and crypto wallets, has been identified by cybersecurity ...
JFrog has uncovered GhostClaw, a fake OpenClaw npm package that stole Keychain passwords, cloud credentials, and crypto wallets from 178 macOS developers.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results