The Hacker News

10 npm Packages Caught Stealing Developer Credentials on Windows, macOS, and Linux

Ten typosquatted npm packages (Jul 4, 2025) delivered a 24MB PyInstaller info stealer using 4 obfuscation layers; ~9,900 ...

Malicious NPM packages fetch infostealer for Windows, Linux, macOS

Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component ...

Dangerous npm packages are targeting developer credentials on Windows, Linux and Mac - here's what we know

Recently, security researchers Socket found 10 packages on npm targeting software developers, specifically those who use the ...
sofeminine

Your 3-minute safety fix: are you placing CO alarms 1.5–1.7 m high and testing every 30 days?

Colder nights push boilers, stoves and fireplaces back into daily use. A silent hazard follows them indoors without warning. As temperatures drop, ...

French minister vows Louvre anti-intrusion devices after post-heist report finds security lapses

France's culture minister says that the Louvre will install streetside anti-ramming and anti-intrusion devices in the next ...
CSO Online

Typo hackers sneak cross-platform credential stealer into 10 npm packages

The typosquatted packages auto-execute on installation, fingerprint victims by IP, and deploy a PyInstaller binary to harvest ...
Developer Tech

Malware campaign on npm steals AWS, GCP, and Azure cloud keys

An advanced malware campaign on the npm registry steals the very keys that control enterprise cloud infrastructure.

Police investigating break-in at home reported to belong to NBA star Shai Gilgeous-Alexander

Police on Friday were investigating a burglary at a home reported to belong to the Oklahoma City Thunder’s Shai Gilgeous-Alexander that happened while the NBA's reigning MVP was playing a game the ...