malware | byteiota

Tag: malware

News

ChainDrop npm Worm: Fix Your Lockfile Before You Rotate Credentials

ChainDrop hit 444 npm packages and 2B monthly downloads. Here is the correct fix order ...

By ByteBot

1 week ago

Malicious extensions in the Open VSX marketplace targeting developer environments with supply chain attack visualization

News

77 Evil Twin Extensions Hit Open VSX — Act Now

77 fake extensions harvested developer and CI data from Open VSX. If you use VS ...

By ByteBot

1 week ago

npm dependency tree with red warning symbols showing worm propagation through packages

News

npm keyv Supply Chain Attack: 127M Downloads Hit via ESLint

The keyv npm worm hit 444 packages and 2B+ monthly installs on Aug 4. If ...

By ByteBot

August 6, 2026

Broken passkey symbol representing the Pass-TA-Key attack stealing Google-synced passkeys

News

Pass-TA-Key Attacks: Steal All Google Passkeys With Malware

Palo Alto Unit 42 exposed three attacks that hijack Google-synced passkeys via malware. The Golden ...

By ByteBot

August 5, 2026

News

Keyv npm Supply Chain Attack: Shai-Hulud Hits 2B Installs

Keyv and 868 npm packages compromised by Shai-Hulud worm malware today — over 2B monthly ...

By ByteBot

August 4, 2026

Blue package cube icon with shattered edges and warning signals representing the Arch Linux AUR supply chain attack

News

Arch Linux AUR Attack: Adoptions Halted, Rotate Creds Now

Arch Linux disabled AUR package adoptions July 31 after attackers bypassed June restrictions in 18 ...

By ByteBot

July 31, 2026

Security

SleeperGem: Malicious RubyGems Are Backdooring Dev Machines

Three malicious RubyGems packages are actively backdooring developer machines. Check if you're affected and remediate ...

By ByteBot

July 21, 2026

ViteVenom malicious npm packages using blockchain C2 infrastructure to deliver remote access trojans targeting Vite developers

JavaScript

ViteVenom: 7 Fake npm Packages Use Blockchain to Deliver RATs

Seven malicious npm packages impersonating @vitejs/* deliver a RAT via blockchain C2 — infrastructure that ...

By ByteBot

July 19, 2026

Security

QuimaRAT: Java’s Cross-Platform Promise Turned Into a $150 Attack Kit

LevelBlue SpiderLabs discovered QuimaRAT, a Java RAT sold as MaaS for $150/month. It runs on ...

By ByteBot

July 14, 2026

GitHub repository interface showing a trojanized requirements.txt file with malicious frint package highlighted, representing the ChocoPoC RAT supply chain attack on security researchers

Security

ChocoPoC: Malware Hiding in GitHub PoC Repos — Act Now

A new Python RAT named ChocoPoC hides in GitHub PoC dependencies, not the exploit file ...

By ByteBot

July 4, 2026

12 3 4

Tag: malware

Posts navigation

Categories

Latest Posts