A newly identified malware campaign dubbed “Megalodon” has compromised more than 5,500 GitHub repositories, raising serious concerns about the security of open-source ecosystems. Security researchers from SafeDep report that the malware spreads through malicious code injections hidden inside seemingly legitimate projects, targeting developers who unknowingly download and execute infected files. Megalodon Malware Infects Github Repo […]

The post Megalodon Malware Rapidly Infects Over 5,500 GitHub Repositories appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

A newly uncovered supply chain attack targeting the npm ecosystem has been linked to North Korean (DPRK)-aligned threat actors. The campaign centers around a malicious npm package named terminal-logger-utils, which embeds a sophisticated multi-stage malware capable of keylogging, data exfiltration, and remote system control. The package was distributed through three dependent libraries pretty-logger-utils, ts-logger-pack, and pinno-loggers which automatically […]

The post Hackers Abuse Hugging Face to Deliver npm Malware appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.