Explore tweets tagged as #npmsecurity
PoCGen is a new AI tool using LLMs, static, and dynamic analysis to automate PoC exploit generation for npm vulnerabilities, achieving high success rates at low cost. #PoCGen #LLMSecurity #Cybersecurity #ExploitAutomation #npmSecurity.
0
0
2
AIMindUpdate News! . Millions depend on open-source code. Is your project safe? Learn how to defend against NPM supply chain attacks and protect your code!#NPMsecurity #SupplyChain #Malware . Click here↓↓↓.
0
0
0
Socket discovered 10 malicious npm packages from Toptal's GitHub, exfiltrating GitHub tokens and wiping systems. The compromise vector is under investigation. #npmSecurity #ToptalHack #SupplyChainAttack #GitHubCompromise #MalwareAlert.
0
1
2
A new npm supply chain attack, "xlsx-to-json-lh," uses typosquatting to enable remote code execution, silently awaiting a "kill switch" to delete project directories. #npmSecurity #SupplyChainAttack #Typosquatting #Cybersecurity.
0
8
11
Socket discovers 4 malicious npm packages designed to drain crypto wallets on BSC & Ethereum, downloaded over 2,100 times. #npmSecurity #CryptoDrainer #SupplyChainAttack #Cybersecurity #Web3Security.
0
0
0
North Korean APTs are using XORIndex malware in a new npm supply chain attack, infiltrating developers via 67 malicious packages to steal crypto wallets and credentials. #NPMSecurity #SupplyChainAttack #NorthKoreaAPT #Cybersecurity #CryptoTheft .
0
1
1
Two critical flaws in pbkdf2 npm package allow silent compromise of cryptographic keys. Update to 3.1.3+ immediately!. #pbkdf2 #npmSecurity #CryptoVulnerability #Cybersecurity #PatchNow .
0
1
1
🚨 Supply chain alert! Six npm packages injected with malware after maintainer tokens were stolen in a sophisticated phishing attack. Are your projects safe? Act fast! #npmSecurity #MalwareAlert
0
0
0
North Korean APTs are using 35 typosquatted npm packages and fake job offers to spread HexEval, BeaverTail, and InvisibleFerret malware, stealing crypto and data from developers. #npmSecurity #SupplyChainAttack #NorthKoreaAPT #Cybersecurity #CryptoTheft.
0
0
0
A sophisticated phishing campaign using a typosquatting domain stole an npm maintainer's credentials, injecting malware into popular packages like eslint-config-prettier and synckit. #npmSecurity #SupplyChainAttack #Phishing #Malware #CybersecurityAlert.
0
0
0
🚨 North Korean hackers are flooding the npm registry with XORIndex malware in an ongoing attack campaign! Developers, secure your dependencies now. #InfoSec #npmSecurity
0
0
0
Rand-User-Agent, a popular npm package, was hijacked to deploy a remote access trojan in a major open-source supply chain attack. #CyberSecurity #SupplyChainAttack #npmSecurity
0
0
0
A phishing attack compromised the 'is' npm library maintainer, leading to malicious versions being published with backdoors for remote code execution. Update immediately!. #npmSecurity #SupplyChainAttack #JavaScriptMalware #CybersecurityAlert #Scavenger.
0
0
0
A new playground: Malicious campaigns proliferate from VSCode to npm. Learn more:- #MaliciousCampaigns #VSCode #npmSecurity
0
0
1
The npm ecosystem powers modern web development 🌐, but it's not without risks. 🚨 Malicious libraries mimicking trusted tools can compromise projects. Stay vigilant: verify packages🛡️ #WebDev #npmSecurity. Read more at:
0
0
0
🚨 North Korean threat actors have expanded their npm campaign, introducing new malicious packages that deploy BeaverTail malware. Devs must stay vigilant against these persistent attacks. #NorthKorea #npmSecurity #MalwareAlert. link:
0
0
2
0
0
0
2/8 Beware of npm packages like .async -mutex/mutex & dexscreener. They're designed to exfiltrate your Solana wallet keys. #NpmSecurity #SolanaScam ⚠️🔑.
1
0
0
🚨 Two popular npm packages, @rspack/core & @rspack/cli, were compromised via a malicious npm token, releasing harmful versions. Sonatype blocked them, including similar threats in "vant." 🇨🇦 #npmSecurity #MalwareAlert #ThreatResearch. link:
0
0
2