LiteLLM, a massively popular Python library, was compromised via a supply chain attack, resulting in the delivery of ...
Language package managers like pip, npm, and others pose a high risk during active supply chain attacks. However, OS updates ...
A widely used Python package with more than 95 million monthly downloads has been compromised with credential-stealing ...
Socket and Endor Labs discovered a new TeamPCP campaign leading to the delivery of credential-stealing malware ...
CanisterWorm infects 28 npm packages via ICP-based C2, enabling self-propagation and persistent backdoor access across ...
Threat actors abused trusted Trivy distribution channels to inject credential‑stealing malware into CI/CD pipelines worldwide ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results