Hackers Inject Malicious JavaScript Into Okendo Reviews Widget to Target E-Commerce Sites
A significant supply chain attack targeting the Okendo Reviews widget. Threat actors known as SmartApeSG successfully injected malicious JavaScript into this popular e-commerce plugin,...
Malicious npm Package dbmux Targets Developers With System-Compromising Malware
The open-source software supply chain has experienced another critical security breach. On June 9, 2026, security analysts disclosed a severe malware infection within the...
Cybercriminals Abuse Tanstack Package To Target Developer Environments
A dangerous new supply chain attack has hit the developer community. A malicious threat actor registered the name "tanstack" on the npm registry, pretending...
Researchers Uncover 36 Rogue npm Packages Delivering Redis RCE and Persistent Malware
Cybersecurity researchers have uncovered a sophisticated supply-chain attack involving 36 malicious npm packages masquerading as plugins for the popular Strapi content management system.
These...
GachiLoader Deploys Payloads Using Heavily Obfuscated Node.js JavaScript Malware on Infected Machines
GachiLoader is a new, heavily obfuscated Node. JS-based loader used to deploy multiple payloads, including the Rhadamanthys infostealer, on compromised Windows machines.
It is...