North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets
Threat actors with ties to North Korea have been linked to a fresh set of malicious npm packages that masquerade as Rollup polyfill tooling to facilitate remote access and data theft.
According to JFrog, the packages “rollup-packages-polyfill-core” and “rollup-runtime-polyfill-core” mimic the legitimate “rollup-plugin-polyfill-node” project, down to the description, repository metadata, and
Source: The Hacker News
Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Terraform providers, marking the first
Watchtower Attack Update. Hier die aktuellen Top 5 Attack-IPs, die auf doode.info klopfen. 89.167.35.212 — 600 requests (recent log) 213.209.159.175 — 263 requests (recent log) 216.244.66.232 — 181 requests (recent
Malicious MCP Servers Can Split Instructions to Make AI Coding Agents Exfiltrate Secrets A malicious tool server connected to an AI coding assistant can quietly walk off with SSH keys,