A sophisticated ClickFix variant dubbed TerminalFix that uses fake Cloudflare CAPTCHA prompts to trick users into executing attacker-controlled PowerShell commands. Rather than delivering a conventional infostealer, the campaign builds persistent access and deploys a reverse-tunnel implant capable of turning an infected Windows endpoint into a proxy for reaching internal network resources The intrusion begins on […]

The post TerminalFix Uses Fake CAPTCHA, DLL Sideloading and Steganography to Breach Networks appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A supply-chain worm has compromised multiple releases of @7nohe/openapi-react-query-codegen, an npm package that generates type-safe TanStack Query hooks. Aikido Security said it identified 10 malicious versions published within 20 minutes. Because the package records more than 150,000 weekly downloads, the incident poses exposure risk to development teams. The breach exposes developer workstations and CI systems […]

The post Hackers Compromise TanStack Query npm Package to Steal Developer Credentials appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.