Microsoft

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Threat actors compromised AsyncAPI packages and weaponized trusted CI/CD workflows to distribute malware through npm. This ...
The Hacker News

148 npm Packages Disguised as Student Proxies Turned Browsers Into a DDoS Botnet

JFrog finds 148 npm proxy packages turned student browsers into a DDoS botnet, while a mutable loader lets operators re-arm ...
Tech Times on MSNOpinion

Telegram serverless ships: One deploy command, but your bot data never leaves Telegram

Telegram Serverless lets developers deploy bot backends on Telegram's own infrastructure with a single tgcloud command, but ...

AsyncAPI npm packages infected with credential-stealing malware

Five malicious versions of AsyncAPI packages were published to the Node Package Manager (npm) in a supply-chain attack that ...
SecurityWeek

Multiple Jscrambler Packages Impacted by Supply Chain Attack

Malicious Jscrambler NPM package versions distributed a cross-platform credential stealer in a new supply chain attack.