/
ttps_attack:T1548.003 × criticity:high × limpar

Resultados

2 casos · pág. 1/1

safedep.io · high

Mini Shai-Hulud worm keeps infecting GitHub repos via hijacked actions-cool/issues-helper tags months after the May 2026 compromise

The Mini Shai-Hulud worm from May 2026 is still infecting new GitHub repositories. SafeDep found six repositories that received malicious hook files between 20 and 24 September 2026. The cause is that all tags of the actions-cool/issues-helper GitHub Action, hijacked on 18 May 2026, still point to the malicious commit, and the payload is …

software development
thehackernews.com · high

Fake Web3 'Apex Accelerator' (REF8801) uses malicious npm packages to deploy stealers, CloudSyncD backdoor and hijack AI agent traffic

Elastic Security Labs is tracking REF8801, a campaign in which a fake Web3 venture capital accelerator, Apex Accelerator (Apex Foundation), targets cryptocurrency startups and founders with malicious npm packages. The packages, @apexacc/cli and @apexacc/audit, pose as an AI advisor and an MCP-based security scanner, with offers of free Cl…

REF8801 cryptocurrency technology