X

Vous n'êtes pas connecté

Maroc Maroc - BLEEPINGCOMPUTER.COM - A La Une - 12/May 11:29

Shai Hulud attack ships signed malicious TanStack, Mistral npm packages

Hundreds of packages across npm and PyPI have been compromised in a new Shai-Hulud supply-chain campaign delivering credential-stealing malware targeting developers. [...]

Articles similaires

Sorry! Image not available at this time

Mini Shai-Hulud Supply Chain Attack

itsecuritynews.info - 12/May 12:03

A new supply chain attack dubbed Mini Shai-Hulud has compromised more than 400 malicious versions across 170 software packages, with high-profile...

Sorry! Image not available at this time

84 npm Packages Linked to TanStack Hit by Supply-Chain Breach

itsecuritynews.info - 12/May 06:05

A massive supply chain breach affecting 84 npm packages within the widely used TanStack ecosystem. Malicious actors compromised these packages by...

Sorry! Image not available at this time

Hackers Compromise 170 npm Packages to Steal GitHub, npm, AWS, and Kubernetes Secrets

itsecuritynews.info - 19:32

A sprawling supply chain attack has put software developers worldwide on high alert after hackers compromised more than 170 npm packages and two PyPI...

Sorry! Image not available at this time

Popular node-ipc npm package compromised to steal credentials

bleepingcomputer.com - 17:10

Hackers have injected credential-stealing malware into newly published versions of node-ipc, a popular inter-process communication package, in a new...

Sorry! Image not available at this time

OpenAI confirms security breach in TanStack supply chain attack

bleepingcomputer.com - 19:07

OpenAI says two employees' devices were breached in the recent TanStack supply chain attack that impacted hundreds of npm and PyPI packages, causing...

Sorry! Image not available at this time

Cache-poisoning caper turns TanStack npm packages toxic

itsecuritynews.info - 12/May 12:03

Six-minute supply chain blitz pushed 84 malicious versions with credential theft and disk-wiping code This article has been indexed from...

Sorry! Image not available at this time

Shai-Hulud Worm Steals npm, GitHub, AWS, and Kubernetes Secrets From Developers

itsecuritynews.info - 16:03

A dangerous new piece of malware called Shai-Hulud has emerged as one of the most alarming supply chain threats of 2026. It is a self-propagating worm...

Sorry! Image not available at this time

Shai-Hulud Worm Steals Dev Secrets Across npm, GitHub, AWS & Kubernetes

itsecuritynews.info - 13:03

Shai-Hulud is a major cybersecurity threat targeting the open-source software supply chain. Security researchers are raising alarms over...

Sorry! Image not available at this time

170 npm Packages Hijacked to Steal GitHub, AWS & Kubernetes Secrets

itsecuritynews.info - 11:03

Hackers have launched a large-scale supply chain attack by compromising more than 170 npm packages and two PyPI libraries, collectively downloaded...

Sorry! Image not available at this time

TeamPCP Claims Sale of Mistral AI Repositories Amid Mini Shai-Hulud Attack

itsecuritynews.info - 01:02

TeamPCP claims to be selling alleged Mistral AI repositories on a hacker forum after the Mini Shai-Hulud attack targeted npm and PyPI ecosystems. This...