debug npm Package
debug is a popular npm package for logging, with millions of weekly downloads. It was hijacked in September 2025 via a maintainer…
Tag: supply chain attack
chalk npm Package
chalk is a widely used npm package for terminal string styling. It was compromised alongside debug in the September 2025 supply chain…
Two Compromised joyfill npm Packages Deliver RAT via Blockchain-Based C2
Two npm packages in the @joyfill namespace, @joyfill/layouts@0.1.2-2773.beta.0 and @joyfill/components@4.0.0-rc24-2773-beta.4, have been compromised to deliver a remote access trojan (RAT) associated with…
Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers
Cybersecurity researchers have uncovered a large-scale campaign that weaponizes compromised GitHub repositories to target cPanel and WebHost Manager (WHM) instances. The activity…
Water Curse: Threat Cluster Using GitHub Ghost Network
Water Curse is a threat cluster tracked by Trend Micro that operates a GitHub-based ghost network to redirect users to malware-laced payloads.…
Trojanized Newtonsoft.Json Fork Targets Digitain Betting Platform in NuGet Typosquat Attack
Cybersecurity researchers at JFrog have uncovered a sophisticated NuGet typosquatting campaign targeting the popular Newtonsoft.Json library. The malicious package, named "Newtonsoftt.Json.Net," is…
Newtonsoftt.Json.Net: Trojanized NuGet Package Targeting Digitain
A trojanized fork of the Newtonsoft.Json library, published as 'Newtonsoftt.Json.Net' on NuGet, designed to rig live game results on the Digitain betting…
Digitain: Online Betting Platform Targeted by Game-Rigging Malware
Digitain is the operator of the FG-Crash betting game, which was the primary target of the Newtonsoftt.Json.Net typosquat attack. The company has…
FakeGit Campaign Uses 7,600 GitHub Repositories to Spread SmartLoader Malware
Cybersecurity researchers have uncovered a large-scale campaign dubbed FakeGit, which leverages nearly 7,600 malicious GitHub repositories to distribute the SmartLoader malware. The…
SleeperGem Attack: Three Malicious RubyGems Packages Target Developer Machines
Cybersecurity researchers have uncovered a sophisticated software supply chain attack dubbed 'SleeperGem' targeting the Ruby ecosystem. Three malicious gems were published to…