Megalodon GitHub Actions Malware
Megalodon injected malicious GitHub Actions workflows into 5,561 repositories. Here is what…
Microsoft Account Hacked? Scan Malware Before Password Reset
Microsoft account hacked after malware? Scan or clean the PC before changing…
Infostealer After Downloading a Game or Mod: What to Do First
If you ran a game, mod, launcher, crack, or private build and…
RenPy Virus: Fake Game Installer, Infostealer Signs, and What to Do
Ren'Py is not malware, but fake game installers can hide stealers. Learn…
Is Roblox Account Manager a Virus? Safe or Trojan?
Roblox Account Manager is not automatically a virus, but it is a…
node-ipc npm Package Compromised With Credential Stealer
Malicious node-ipc versions 9.1.6, 9.2.3, and 12.0.1 were published to npm with…
Trojan:JS/ChatGPTStealer!MSR: What It Means and What to Do
Microsoft Defender can flag Trojan:JS/ChatGPTStealer!MSR when a malicious or suspicious JavaScript file…
Mini Shai-Hulud Hits TanStack npm Packages With Signed Malware
Mini Shai-Hulud abused trusted publishing to ship malicious TanStack npm packages with…
Fake Claude Code Ads Push MacSync Stealer on macOS
A Google Ads malvertising campaign used fake Claude Code install pages and…
Fake OpenAI Hugging Face Repo: Infostealer Warning
HiddenLayer says a fake OpenAI-themed Hugging Face repository copied a privacy-filter model…
ClickFix WordPress Attacks Push Vidar Stealer Malware
Australia warns that ClickFix attacks are abusing compromised WordPress sites and fake…
AI Chats Are Delivering AMOS Stealer Through Google Search Results
Here's a novel malware delivery vector that nobody saw coming. Attackers are…