Two fake spellchecker packages on PyPI hid a Python RAT in dictionary files, activating malware on import in version 1.2.0.
A new malicious campaign mixes the ClickFix method with fake CAPTCHA and a signed Microsoft Application Virtualization (App-V ...
Security researchers found two AI-branded VS Code extensions with 1.5M installs that covertly send source code and files to ...
Koi security researchers found that when NPM installs a dependency from a Git repository, configuration files such as a ...
Moltbot is a security nightmare: 5 reasons to avoid using the viral AI agent right now ...
Cybersecurity firm LayerX uncovers 17 malicious extensions that can enable click fraud, user tracking, and more. The most ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results