malware

2 articles · newest first

A terminal window showing npm package install output, representing the compromised JavaScript package ecosystem

a hacked github account just turned npm into a credential-stealing worm

One compromised maintainer account, ten trojanized packages, two billion downloads a month — and the malware is specifically hunting for your Claude and Cursor configs.

Priya Nair · 1h ago · 6 min

A Wi-Fi router in a hotel setting, illustrating the captive portal infrastructure hijacked in Microsoft's CaptiveCrunch disclosure

Hardware

that hotel wifi login screen you clicked through? it might be russian spies

Microsoft says a Kremlin-linked group has been hijacking hotel and conference Wi-Fi captive portals since May to install espionage malware on business travelers' laptops.

Ravi Malhotra · 1h ago · 6 min