North Korean-linked campaign publishes 26 malicious npm packages hiding C2 in Pastebin, deploying credential stealers & RAT via 31 Vercel deployments.
A "coordinated developer-targeting campaign" is using malicious repositories disguised as legitimate Next.js projects and ...
Attackers used “technical assessment” projects with repeatable naming conventions to blend in cloning and build workflows, retrieving loader scripts from remote infrastructure, and minimizing on-disk ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results