Discussion

• Checkmarx Yehuda Gelb on x

  Dozens of Machines Infected: Year-Long NPM Supply Chain Attack Combines Crypto Mining and Data Theft

• @dangoodin Dan Goodin on bluesky

  Threat actors spread info stealing malware through 1) GitHub-hosted PoC exploits for CVE vulns and 2) phishing emails targeteting 2,700 addresseses scraped from the arXiv research platform.  The professional grade istealer stole 390,009 creds, likely from bad guys.  —  arstechnic…

• r/technology r on reddit

  Yearlong supply-chain attack targeting security pros steals 390K credentials

• r/espionage r on reddit

  Yearlong supply-chain attack targeting security pros steals 390K credentials |  Multifaceted, high-precision campaign targets malicious and benevolent hackers alike.