node-ipc npm Package Compromised With Credential Stealer
Malicious node-ipc versions 9.1.6, 9.2.3, and 12.0.1 were published to npm with…
Trojan:JS/ChatGPTStealer!MSR: What It Means and What to Do
Microsoft Defender can flag Trojan:JS/ChatGPTStealer!MSR when a malicious or suspicious JavaScript file…
Mini Shai-Hulud Hits TanStack npm Packages With Signed Malware
Mini Shai-Hulud abused trusted publishing to ship malicious TanStack npm packages with…
Fake Claude Code Ads Push MacSync Stealer on macOS
A Google Ads malvertising campaign used fake Claude Code install pages and…
Fake OpenAI Hugging Face Repo: Infostealer Warning
HiddenLayer says a fake OpenAI-themed Hugging Face repository copied a privacy-filter model…
ClickFix WordPress Attacks Push Vidar Stealer Malware
Australia warns that ClickFix attacks are abusing compromised WordPress sites and fake…
AI Chats Are Delivering AMOS Stealer Through Google Search Results
Here's a novel malware delivery vector that nobody saw coming. Attackers are…
Odyssey Stealer on macOS: ClickFix, Ledger Live Theft, and Removal
Odyssey Stealer uses fake verification and macOS malware to steal browser, Keychain,…
Cybercriminal campaign exploiting Booking.com
Cybercriminals are running a two-pronged attack targeting both travelers and hotel staff…
Noodlophile Stealer: Cybercriminals Hijack AI Hype to Steal Your Data
Just when you thought cybercriminals couldn't get more creative, they've found a…
Octalyn Stealer: How This Threat Steals Passwords, Crypto & Browser Data
Octalyn Stealer is an information-stealing malware that's currently being promoted on GitHub…
MaksStealer (MaxCoffe): The Minecraft Mod That’s Actually Stealing Your Passwords
For Minecraft Gamers: MaxCoffe masquerading as a Minecraft performance enhancer! MaksStealer is…