/
attack_type:worm × victim_sectors:"software development" × criticity:critical × limpar

Resultados

2 casos · pág. 1/1

safedep.io · critical

tensorlake 0.5.144 npm package compromised to deliver Mini Shai-Hulud credential-stealing worm

SafeDep identified a malicious tensorlake npm release, version 0.5.144 (about 106,000 monthly downloads), that ran a Mini Shai-Hulud worm on install. It was published at 01:12:07 UTC on 8 October and flagged by SafeDep eight minutes later. The attacker used a repository administrator account to commit the payload to main through the GitHu…

technology software development
safedep.io · critical

DirtyBlanket npm packages impersonating Express and React drop self-spreading Linux worm with CHAOS RAT backdoor

The npm account dirtyblanket published nine typosquatted packages on September 29, 2026 in 33 minutes, eight copying Express and one copying React. On Linux, a preinstall hook fetches node.js through the Internet Archive Wayback Machine, which pulls the worm linux.sh from Codeberg and runs it with bash. The worm installs CHAOS, an open-so…

dirtyblanket hellscripter technology software development