Tag programming

  • Sort by
Another set of malicious npm packages caught stealing Discord tokens, environment variables
Brief Another set of malicious npm packages caught stealing Discord tokens, environment variables

Catalin Cimpanu February 22, 2022

Thousands of npm accounts use email addresses with expired domains

Catalin Cimpanu February 11, 2022

Thousands of npm accounts use email addresses with expired domains
npm enrolls Top 100 package maintainers into mandatory 2FA
Brief npm enrolls Top 100 package maintainers into mandatory 2FA

Catalin Cimpanu February 2, 2022

Google: More than 35,000 Java packages impacted by Log4j vulnerabilities

Catalin Cimpanu December 17, 2021

Google: More than 35,000 Java packages impacted by Log4j vulnerabilities
Malicious npm packages caught stealing Discord tokens, environment variables

Catalin Cimpanu December 8, 2021

Malicious npm packages caught stealing Discord tokens, environment variables
Malicious Python packages caught stealing Discord tokens, installing shells
Brief Malicious Python packages caught stealing Discord tokens, installing shells

Catalin Cimpanu November 19, 2021

Facebook to work with GitHub to invalidate leaked API access tokens
Brief Facebook to work with GitHub to invalidate leaked API access tokens

Catalin Cimpanu November 9, 2021

Malware found in coa and rc, two npm packages with 23M weekly downloads

Catalin Cimpanu November 5, 2021

Malware found in coa and rc, two npm packages with 23M weekly downloads
GitLab servers are being exploited in DDoS attacks in excess of 1 Tbps

Catalin Cimpanu November 4, 2021

GitLab servers are being exploited in DDoS attacks in excess of 1 Tbps
New Trojan Source attack impacts compilers for most programming languages

Catalin Cimpanu November 1, 2021

New Trojan Source attack impacts compilers for most programming languages
Malware found in npm package with millions of weekly downloads

Catalin Cimpanu October 23, 2021

Malware found in npm package with millions of weekly downloads
Crypto-miner found hidden inside three npm libraries
Brief Crypto-miner found hidden inside three npm libraries

Catalin Cimpanu October 20, 2021

Facebook open-sources internal tool used to detect security bugs in Android apps

Catalin Cimpanu September 29, 2021

Facebook open-sources internal tool used to detect security bugs in Android apps
Python team fixes bug that allowed takeover of PyPI repository
Brief Python team fixes bug that allowed takeover of PyPI repository

Catalin Cimpanu July 30, 2021

Python packages caught attempting to steal Discord tokens, credit card numbers
Brief Python packages caught attempting to steal Discord tokens, credit card numbers

Catalin Cimpanu July 29, 2021

Codecov discloses 2.5-month-long supply chain attack

Catalin Cimpanu April 16, 2021

Codecov discloses 2.5-month-long supply chain attack
Hackers backdoor PHP source code after internal repo hack

Catalin Cimpanu March 29, 2021

Hackers backdoor PHP source code after internal repo hack