Auto Added by WPeMatico
A self-replicating worm that hijacks GitHub Actions pipelines to publish malicious npm packages has struck again, compromising AntV, echarts-for-react, and Microsoft’s durabletask SDK. Mini Shai-Hulud Exploits GitHub Actions to Hit…
Volo Protocol, a liquid staking and BTCFi platform on the Sui blockchain, confirmed a $3.5 million security exploit this week, tied to a compromised vault admin private key. Key Takeaways:…
A malicious npm package impersonating an installer for the Openclaw artificial intelligence (AI) agent framework is spreading credential-stealing malware designed to quietly take control of developer machines. Security Researchers Expose…
Kaspersky discovers Stealka, a sophisticated infostealer disguised as game mods and pirated software, capable of stealing cryptocurrency wallets, account credentials, and system data across multiple platforms. Kaspersky researchers have uncovered…
According to a myriad of reports, Aerodrome Finance and Velodrome Finance spent Saturday putting out fires after a DNS hijack quietly rerouted users to phishing sites. Aerodrome–Velodrome Front Ends Compromised…
Digital asset wealth platform Nexo has launched a risk-based Anti-Scam Engine that flags suspicious transfers in real time and, in high-risk cases, can briefly pause transactions to protect clients. Nexo…
Ledger CTO Charles Guillemet warned Monday that a large-scale software supply chain attack is underway targeting NPM packages used across the JavaScript ecosystem globally. ‘Potentially All Chains’: Ledger CTO Cautions…