OTTERCOOKIE Malware Hides in SVG Files in Fake Coding Tests
Fake coding-test repositories hide OTTERCOOKIE fragments in SVG flags. Here is what executes, what it steals, and what to check after running one.
News desk
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
September 13, 2026
Fake coding-test repositories hide OTTERCOOKIE fragments in SVG flags. Here is what executes, what it steals, and what to check after running one.
CVE-2026-53412 is a critical Zoom Workplace for Windows flaw that may allow unauthenticated account takeover. Check your version and update now.
A disclosed Cursor flaw can run a repository-local git.exe on Windows when a project opens. Check the root folder and recover safely after exposure.
Fake LastPass and Bitwarden security-policy emails use newsletter and compliance lookalike domains. Check the sender, avoid the download, and secure your vault.
LabubaRAT malware hides as nvidia-sysruntime.exe. Verify its signature and hash, remove autorun, scan for leftovers, and secure exposed accounts.
Lucide Proxy used 148 npm packages to turn student browser tabs into DDoS nodes. Check visits, service workers, site data, domains, and lockfiles.
Five malicious Jscrambler npm releases ran a cross-platform infostealer. Check versions, lockfiles, persistence, sessions, and exposed secrets.
Ledger Donjon demonstrated a lab-grade laser attack that resets a Tangem card access code. Learn when owners should move funds and why this is…
Ill Bloom exposed weak crypto-wallet recovery phrases and drained 431 accounts. Learn who may be affected, how to check safely, and why a new…