31.npm v12 delivers one of the biggest security improvements in yearsblog | 2026-06-11 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #devsecops | #open-source
32.Shai-Hulud copycat campaign targets Python developers through PyPI typosquattingblog | 2026-06-09 00:00 | about.gitlab.com | Original ↗ | .md | #supply-chain | #malware | #credential-theft
33.Crypto wallet security: Best Practisesblog | 2026-06-09 14:02 | hackenproof.com | Original ↗ | .md | #web3 | #secrets | #malware
34.Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build Systemblog | 2026-06-09 00:00 | aikido.dev | Original ↗ | .md | #cloud | #supply-chain | #malware
35."Practical Android Software Protection in the Wild" - An Appetizerresearch | 2026-06-03 22:00 | blog.quarkslab.com | Original ↗ | .md | #malware | #android | #reverse-engineering
36.Miasma: Supply Chain Attack Targeting RedHat npm Packagesincident | 2026-06-01 12:45 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #malware
37.The sorry state of skill distributionblog | 2026-06-03 11:00 | blog.trailofbits.com | Original ↗ | .md | #ai-security | #supply-chain | #agentic-ai
38.Why EDR and proxy won’t save you from supply chain malwareblog | 2026-06-02 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #npm
39.Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokensblog | 2026-05-27 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #malware
40.Reverse Engineering SmartLoader: Where Commodity Malware and Operational Tooling Divergeresearch | 2026-05-18 19:54 | yokai.hakaisecurity.io | Original ↗ | .md | #vulnerability-research | #malware | #reverse-engineering
41.durabletask: TeamPCP's Latest PyPi Compromiseblog | 2026-05-19 17:30 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #malware
42.The Worm That Keeps on Digging: TeamPCP Hits @antv in Latest Waveblog | 2026-05-19 08:29 | wiz.io | Original ↗ | .md | #supply-chain | #malware | #credential-theft
43.How TeamPCP's Python Toolkit Survives a C2 Takedown: FIRESCALE, GitHub, and the Victim's Own Accountresearch | 2026-05-14 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware
44.Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstackblog | 2026-05-12 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #malware
45.Mini Shai-Hulud Strikes Again: TanStack + more npm Packages Compromisedblog | 2026-05-12 01:38 | wiz.io | Original ↗ | .md | #ai-security | #supply-chain | #malware
46.How to detect and prevent Contagious Interview IDE attacksblog | 2026-05-04 00:00 | about.gitlab.com | Original ↗ | .md | #threat-intelligence | #malware | #threat-detection
47.Supply Chain Campaign Targets SAP npm Packages with Credential-Stealing Malwareblog | 2026-04-29 15:14 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #kubernetes
48.Mini Shai-Hulud Targets SAP npm Packages With a Bun-Based Secret Stealerblog | 2026-04-29 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #secrets | #malware
49.xlabs_v1 DDoS-for-Hire Operation Exposed: How an Operator's Debug Build Unraveled a Commercial Game-Server Botnetblog | 2026-04-29 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #malware | #denial-of-service
50.DinDoor Backdoor: Deno Runtime Abuse and 20 Active C2 Serversblog | 2026-04-21 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #malware | #backdoor
51.Telegram Bot API Abuseblog | 2026-04-16 00:00 | netlas.io | Original ↗ | .md | #malware | #threat-hunting | #phishing
52.Exposing Russian Malicious Infrastructure: 1,250+ C2 Servers Mapped Across 165 Providersblog | 2026-04-15 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #malware | #threat-hunting
53.Canis C2 Exposed: Previously Undocumented Cross-Platform Surveillance Framework Targeting Japanblog | 2026-04-08 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #malware | #android
54.Breaking Down the Axios Supply Chain Attack: Dropper, Cross-Platform RATs, and BlueNoroff/TA444incident | 2026-04-01 00:00 | hunt.io | Original ↗ | .md | #supply-chain | #malware | #npm
55.TheGentlemen Ransomware Toolkit Found on Russian Proton66 Serverincident | 2026-03-24 00:00 | hunt.io | Original ↗ | .md | #secrets | #threat-intelligence | #malware
56.Three’s a Crowd: TeamPCP trojanizes LiteLLM in Continuation of Campaignblog | 2026-03-24 18:40 | wiz.io | Original ↗ | .md | #cloud | #supply-chain | #malware
57.Iranian Botnet Exposed via Open Directory: 15-Node Relay Network and Active C2research | 2026-03-17 00:00 | hunt.io | Original ↗ | .md | #threat-intelligence | #malware | #botnet
58.fast-draft Open VSX Extension Compromised by BlokTrooperblog | 2026-03-18 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #infostealer
59.Glassworm Strikes Popular React Native Phone Number Packagesblog | 2026-03-16 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #npm
60.Operation Roundish: Uncovering an APT28 Roundcube Exploitation Toolkit Targeting Ukraineresearch | 2026-03-11 00:00 | hunt.io | Original ↗ | .md | #ai-security | #threat-intelligence | #malware