From package to postinstall payload: Inside the Mastra npm supply chain compromise by Sapphire Sleet
A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...
JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.
yt-dlp_linux Linux (glibc 2.17+) standalone x86_64 binary yt-dlp_linux.zip Unpackaged Linux (glibc 2.17+) x86_64 executable (no auto-update) yt-dlp_linux_aarch64 Linux (glibc 2.17+) standalone aarch64 ...
Ongoing research into AI agent framework security identified an exploit chain in AutoGen Studio (AutoGen’s open-source prototyping user interface) that allows untrusted web content rendered by a ...
As of June 19, 2026 @ 23:27 UTC, the Amazon Inspector Security Research team is actively monitoring this campaign for any further development — including new scopes, rotated GitHub accounts, C2 ...
🌟 𝗝𝗮𝘃𝗮 𝗜𝗻𝘁𝗲𝗿𝘃𝗶𝗲𝘄 𝗘𝘀𝘀𝗲𝗻𝘁𝗶𝗮𝗹𝘀: 𝗪𝗵𝘆 𝗶𝘀 𝗦𝘁𝗿𝗶𝗻𝗴 ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results