Ravie LakshmananOct 08, 2026Browser Security / Malware Cybersecurity researchers have discovered a cluster of 16 malicious Mozilla Firefox extensions that […]
Category: Malicious
101 Malicious npm Packages Add Developers’ WhatsApp Accounts to Groups Without Consent
Ravie LakshmananSep 29, 2026Supply Chain / Malware Cybersecurity researchers have identified a cluster of 101 npm packages that are used […]
Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials
Ravie LakshmananSep 22, 2026Supply Chain Attack / Malware Cybersecurity researchers have disclosed details of a malicious npm package named “tw-pkgprobe-7731” […]
Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal
A malicious npm package named “indexed-btree” has been observed hiding its malicious behavior within application code rather than using lifecycle […]
Malicious Twitch Browser Extension Leaks OAuth Tokens From Nearly 31,000 Users
Ravie LakshmananSep 14, 2026Malware / Browser Security A malicious cross-store Twitch browser extension has leaked OAuth tokens associated with nearly […]
Malicious .git Configs Can Make Claude, Codex, Cursor, and Other AI Agents Run Attacker Code
Manifold Security has disclosed eight security flaws across seven command-line AI coding agents in which a repository’s own Git configuration […]
Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromised web servers run […]
13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds
Cybersecurity researchers have identified a set of 13 malicious Composer theme packages on Packagist that are designed to inject JavaScript […]
A Malicious Webpage Could Poison Your Local AI Model Behind NVIDIA NemoClaw
Oasis Security has disclosed a weakness in NVIDIA NemoClaw that could let an attacker-controlled webpage take unauthenticated control of the […]
40 Malicious Firefox Extensions Pose as Web3 Products to Steal Wallet Secrets
Ravie LakshmananAug 20, 2026Browser Security / Cryptocurrency A set of 40 Mozilla Firefox extensions has been found to engage in […]
