#developer-targeting

[cyber-sec]

Malicious Next.js Repositories Compromise Developers

Trojanised Next.js repositories are targeting developers via build-time scripts and VS Code tasks, establishing stealthy command-and-control channels.

Source: Microsoft

Read more: CyberSecBrief

[cyber-sec]

Lazarus Group Bakes Malware Into Git Hooks in Fake Job Tests

North Korean-linked Lazarus operators are hiding malware in Git hooks inside fake developer assessments, silently executing payloads during routine repository actions.

Source: OpenSourceMalware.com

Read more: CyberSecBrief