GoKawiil
Axios compromised on NPM – Malicious versions drop remote access trojan
(news.ycombinator.com)
91.
92.
Axios Compromised on NPM – Malicious Versions Drop Remote Access Trojan
(news.ycombinator.com)
93.
TikTok for Business accounts targeted in new phishing campaign
(bleepingcomputer.com)
94.
Tell HN: Litellm 1.82.7 and 1.82.8 on PyPI are compromised
(news.ycombinator.com)
95.
New font-rendering trick hides malicious commands from AI tools
(bleepingcomputer.com)
96.
98.
Xygeni GitHub Action Compromised Via Tag Poison
(darkreading.com)
99.
100.
101.
Why the shift left dream has become a nightmare for security and developers
(bleepingcomputer.com)
102.
Supply Chain Attack Secretly Installs OpenClaw for Cline Users
(darkreading.com)
103.
Google says its AI systems helped deter Play Store malware in 2025
(techcrunch.com)
104.
CTM360: Lumma Stealer and Ninja Browser malware campaign abusing Google Groups
(bleepingcomputer.com)
105.
Fake job recruiters hide malware in developer coding challenges
(bleepingcomputer.com)
106.
Claude LLM artifacts abused to push Mac infostealers in ClickFix attack
(bleepingcomputer.com)
107.
Microsoft: New Windows LNK spoofing issues aren't vulnerabilities
(bleepingcomputer.com)
108.
109.
Fake AI Chrome extensions with 300K users steal credentials, emails
(bleepingcomputer.com)
110.
111.
Malicious 7-Zip site distributes installer laced with proxy tool
(bleepingcomputer.com)
112.
More Mac malware from Google search
(news.ycombinator.com)
113.
Malicious packages for dYdX cryptocurrency exchange empties user wallets
(arstechnica.com)
114.
Show HN: Daily-updated database of malicious browser extensions
(news.ycombinator.com)
115.
Ransomware gang uses ISPsystem VMs for stealthy payload delivery
(bleepingcomputer.com)
116.
117.
Russian Hackers Weaponize Microsoft Office Bug in Just 3 Days
(darkreading.com)
118.
A WhatsApp bug lets malicious media files spread through group chats
(news.ycombinator.com)
119.
Notepad++ users take note: It's time to check if you're hacked
(arstechnica.com)
120.
New GlassWorm attack targets macOS via compromised OpenVSX extensions
(bleepingcomputer.com)