/
data_types_exposed:system_information × victim_sectors:"software development" × limpar

Resultados

2 casos · pág. 1/1

safedep.io · medium

Researcher squats 21 npm names matching bin entries of Google-scoped packages, using postinstall fingerprint beacons

On August 12, 2026, an npm user (rootdaddy-msrc, author field r00tdaddy) published 21 packages that squatted the unscoped CLI binary names declared in the bin field of Google-affiliated scoped packages, such as ngsw-config (from @angular/service-worker) and bazelisk (from @bazel/bazelisk). Scoped publishing, registry allowlists and lockfi…

r00tdaddy technology software development
securelist.com · high

MacSync macOS stealer returns with binary droppers, iCloud calendar staging and a backdoor targeting crypto users and developers

Kaspersky researchers describe a new MacSync macOS infostealer variant, first seen in the wild in September 2026, that replaces the earlier AppleScript-based droppers with FAT Mach-O binaries written in Objective-C and Swift. MacSync is sold as malware-as-a-service, so delivery varies by operator. In this campaign it spread through malici…

cryptocurrency software development