Tag: npm

Nayatel Cloud Expands Enterprise Portfolio With ZTBL Business Email Deployment

Wired
Nayatel Cloud has partnered with Zarai Taraqiati Bank Limited to provide its Nmail business email solution powered by Zimbra, supporting the growing adoption of locally hosted enterprise cloud services in Pakistan.

AhsayCBS Vulnerabilities Exploited To Install Crypto Miners On Affected Systems

Risk & Resilience
Threat actors are exploiting AhsayCBS vulnerabilities to gain remote access, deploy web shells, and install XMRig cryptocurrency miners disguised as Microsoft Edge processes.

GitHub Introduces Three Day Dependabot Delay To Reduce Supply Chain Risks

Risk & Resilience
GitHub has introduced a default three day cooldown for Dependabot version updates to help reduce the risk of poisoned software packages spreading through supply chains.

North Korea Linked npm Packages Impersonate Rollup Polyfill Tools To Target Developer Systems And Steal Secrets

Risk & Resilience
Security researchers have uncovered malicious npm packages linked to North Korea that impersonate Rollup polyfill tools to deliver remote access malware and steal developer credentials and sensitive data.

Mini Shai Hulud Worm Compromises TanStack, Mistral AI, Guardrails AI And Multiple Open Source Packages In Supply Chain Attack

Risk & Resilience
A Mini Shai Hulud worm linked to TeamPCP has compromised npm and PyPI packages across TanStack, Mistral AI, Guardrails AI and others, deploying credential stealers, CI/CD exploits, and cross ecosystem propagation techniques.

Cline CLI 2.3.0 Supply Chain Attack Led To Unauthorized OpenClaw Installation On Developer Systems

Risk & Resilience
A compromised npm publish token was used to release Cline CLI version 2.3.0, triggering unauthorized installation of OpenClaw on developer systems during an eight hour supply chain attack window.

Recent articles

spot_img