Hundreds of trojanized versions of well-known packages such as Zapier, ENS Domains, PostHog, and Postman have been planted in ...

Shai-Hulud malware infiltrates 490 NPM packages, stealing API keys and credentials from ENS and major crypto development ...

The attackers have learned from their mistakes and have now developed a more aggressive version of the worm. It has already ...

Approximately 640 NPM packages have been infected with a new variant of the Shai-Hulud self-replicating worm in a fresh wave of attacks.

A new iteration of the Shai-Hulud malware that ran through npm repositories in September is faster, more dangerous, and more destructive, creating huge numbers of malicious repositories, compromised ...

AI giant OpenAI has revealed its API metadata was exposed in a security breach. A phishing incident at third-party data ...

Bitdefender details fake Battlefield 6 pirated versions and fake game trainers found across torrent trackers and other easily ...

OpenAI has confirmed a data exposure incident at its former analytics partner Mixpanel. The breach impacted limited API account info like names and email IDs but no passwords or chat data. OpenAI has ...

The Shai-Hulud supply chain attack campaign, responsible for compromising hundreds of CrowdStrike’s NPM packages in September ...

While the September 2025 Shai-Hulud attack focused primarily on credential harvesting and self-propagation, this new variant ...