Cyber Attacks
Threat Actors Pose as Web3 Accelerator to Distribute Malicious npm Packages
Attackers used fake AI credits and audits to trick crypto founders into installing malware that steals data and monitors AI tool usage.
npm
Everything NetSec Tribune has reported about npm: 2 stories, newest first. Part of our Cyber Attacks coverage.
Malware & Ransomware
Shai-Hulud worm targets AI via Tensorlake npm; creds stolen in minutes, scope unclear
Credential-stealing malware was detected within minutes of the compromised npm release, though the full scope of the infection remains unknown.