/
ttps_attack:T1105 × latest_source_host:thehackernews.com × victim_sectors:"software development" × limpar

Resultados

2 casos · pág. 1/1

thehackernews.com · high

Attacker hijacks contributor GitHub account to swap binaries on five OVHcloud CLI releases with secret-stealing build

On 19 October 2026 an attacker used a hijacked contributor's GitHub account to replace the download archives on five existing releases (v0.11.0 to v0.15.0) of OVHcloud CLI. The swapped files were a build designed to steal secrets stored on the disk of any machine that ran it. They were live from 12:47 to 14:21 UTC (up to 94 minutes) for m…

technology cloud services
thehackernews.com · high

MALFEX npm campaign: 'imgdecode' package hides shellcode loader in Windows native addon, delivers Node.js stealer/RAT

Researchers at SafeDep identified imgdecode, a malicious npm package tied to the long-running MALFEX supply chain campaign first documented by Checkmarx and CloudSEK. Published on September 30, 2026 by user "malfexteste8", it has been downloaded 979 times and was still available at the time of reporting (latest version 1.0.3). MALFEX has …

technology software development