Discover Top Posts Tagged with #credentials-theft

Worm-Like npm Malware Hijacks Developer Systems

A self-propagating npm supply chain attack spreads CanisterWorm malware through compromised packages, stealing developer credentials and republishing infected versions across ecosystems. The malware extracts SSH keys, cloud credentials, and crypto wallets while exfiltrating data via encrypted channels and Internet Computer canister infrastructure. It further propagates by abusing stolen npm tokens to infect additional packages and extend cross-ecosystem compromise into PyPI.

Source: Socket

Read more: CyberSecBrief

#supply-chain #malware #npm #credentials-theft #infostealer

Massive npm Hack Hits Tinycolor and CrowdStrike Packages

Hackers have hijacked nearly 500 npm packages, planting malware that steals developer secrets and spreads through poisoned updates — hitting everything from Tinycolor to CrowdStrike libraries.

Source: Socket | Socket

Read more: CyberSecBrief

#cybersecurity #supplychain #npm #malware #credentials-theft

npm Supply Chain Worm Spreads Through 57 Packages in Two Hours

A fast-moving npm supply chain attack has compromised 57 packages using a tiny binding.gyp file that triggers code execution during installation and evades standard script-based protections. The malware steals GitHub and cloud credentials, deploys the Bun runtime, and uploads encrypted data to attacker-controlled repositories while attempting cross-ecosystem propagation into RubyGems and GitHub. Researchers report over 286 malicious package versions were published during a short two-hour window on 3 June.

Source: StepSecurity

Read more: CyberSecBrief

#npm #supply-chain #malware #credentials-theft #infostealer #worm

TeamPCP Weaponises CI/CD Pipelines in Multi-Platform Supply Chain Attacks

The TeamPCP threat group compromised CI/CD systems across GitHub Actions, Docker Hub and PyPI, stealing developer credentials including GitHub tokens, SSH keys and cloud access secrets. Attackers then used the stolen access to distribute trojanised packages such as a modified Bitwarden CLI and a malicious PyPI component harvesting AWS and Kubernetes credentials.

Source: Trend Micro

Read more: CyberSecBrief

#supply-chain #CI/CD #malware #credentials-theft #GitHub

#credentials-theft

Trending Tags

Recently Viewed Tags

#credentials-theft