Welcoming the Bhutanese Government to Have I Been Pwned
Today, we welcome the 45th government onboarded to [...]
TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIO
A new coordinated cross-ecosystem software supply chain attack [...]
Malicious npm Package Stole Files From Claude AI User Directory via GitHub
Ravie LakshmananMay 27, 2026Threat Intelligence / Supply Chain [...]
TeamPCP Supply Chain Campaign: Activity Through 2026-05-24
TeamPCP now operates across three package ecosystems in [...]
TeamPCP Supply Chain Campaign: Activity Through 2026-05-24
TeamPCP now operates across three package ecosystems in [...]
Webworm: New burrowing techniques
ESET researchers analyzed the 2025 activity of Webworm, [...]
High-speed train hacks and homicidal lawnmowers • Graham Cluley
GEOFF WHITE Why am I tempting fate? Don't [...]
Popular GitHub Action Tags Redirected to Imposter Commit to Steal CI/CD Credentials
Ravie LakshmananMay 19, 2026Software Security / Malware In [...]
TeamPCP Supply Chain Campaign: Activity Through 2026-05-17
Since the last update, the TeamPCP supply chain campaign [...]
Fresh mischief and digital shenanigans
This blogpost covers newly discovered activities attributed to [...]