New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally

New Supply Chain Malware Operation Hits npm and PyPI Ecosystems, Targeting Millions Globally

/in

Cybersecurity researchers have flagged a supply chain attack targeting over a dozen packages associated with GlueStack to deliver malware.
The malware, introduced via a change to “lib/commonjs/index.js,” allows an attacker to run shell commands, take screenshots, and upload files to infected machines, Aikido Security told The Hacker News, stating these packages collectively account for nearly 1

The Hacker News – ​Read More

Malicious Browser Extensions Infect 722 Users Across Latin America Since Early...Malicious Browser Extensions Infect 722 Users Across Latin America Since Early 2025Hackers Using Fake IT Support Calls to Breach Corporate Systems, Google