Weaponized AWS Packages Spreading Malware through Innocent-Looking JPEGs
Malicious actors published seemingly legitimate packages to the npm registry that contained malicious code hidden within image files. The code was executed during installation...
Attention AWS Users: Malicious npm Package Mimics Legitimate Tools
Malicious actors are increasingly targeting open-source public repositories with malware cloaked in legitimate packages, which frequently steals sensitive data or downloads more malware.
Security researchers...
Hackers Unleash 250 Fake npm Packages Imitating AWS & Microsoft Projects!
Malicious actors are exploiting the popularity of open-source projects by publishing over 250 booby-trapped npm packages, which masquerade as legitimate offerings from companies like...
Cyber Heist: Hackers Breach Vaults, Buckets, & Secrets for Massive Data Theft!
An attacker leveraged leaked long-term AWS access keys to automate the enumeration of victims' secrets, S3 buckets, and even S3 Glacier vaults, where the...
