New npm supply-chain attack self-spreads to steal auth tokens
(bleepingcomputer.com)
1.
2.
Your trash can is ugly. Caraway wants to fix that
(feeds.feedburner.com)
3.
4.
Popular LiteLLM PyPI package backdoored to steal credentials, auth tokens
(bleepingcomputer.com)
5.
TeamPCP deploys Iran-targeted wiper in Kubernetes attacks
(bleepingcomputer.com)
6.
‘CanisterWorm’ Springs Wiper Attack Targeting Iran
(krebsonsecurity.com)
7.
8.
9.