sign up
sign up
sign up
sign up
pull down to refresh
Malicious Python Packages Replace Crypto Addresses in Developer Clipboards
blog.phylum.io/pypi-malware-replaces-crypto-addresses-in-developers-clipboard
334 sats
\
3 comments
\
@rijndael
7 Nov 2022
bitcoin
related
Experts found 3 malicious packages hiding crypto miners in PyPi repository
securityaffairs.com/156897/malware/malicious-packages-pypi-repository.html
813 sats
\
2 comments
\
@Gian
5 Jan 2024
security
Compromised npm package silently installs OpenClaw on developer machines
www.csoonline.com/article/4135449/compromised-npm-package-silently-installs-openclaw-on-developer-machines.html
422 sats
\
4 comments
\
@winteryeti
24 Feb
AI
We Just Found Malicious Code in the Popular NPM Package
jdstaerk.substack.com/p/we-just-found-malicious-code-in-the
1497 sats
\
18 comments
\
@kristapsk
8 Sep 2025
security
Malicious npm Packages Harvest Crypto Keys, CI Secrets, and API Tokens
thehackernews.com/2026/02/malicious-npm-packages-harvest-crypto.html
30 sats
\
0 comments
\
@winteryeti
25 Feb
tech
GitHub Developers Hit in Complex Supply Chain Cyberattack
www.darkreading.com/application-security/github-developers-hit-in-complex-supply-chain-cyberattack
125 sats
\
0 comments
\
@ch0k1
26 Mar 2024
devs
Over 100,000 Infected Repos Found on GitHub
1697 sats
\
6 comments
\
@0xbitcoiner
29 Feb 2024
security
Bogus npm Packages Used to Trick Software Developers into Installing Malware
thehackernews.com/2024/04/bogus-npm-packages-used-to-trick.html?m=1
52 sats
\
1 comment
\
@ch0k1
28 Apr 2024
security
firefox-patch-bin, librewolf-fix-bin and other AUR packages contain malware
lists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/7EZTJXLIAQLARQNTMEW2HBWZYE626IFJ/
408 sats
\
2 comments
\
@k00b
24 Jul 2025
security
Sendstr: an open source end-to-end encrypted shared clipboard app on Nostr
github.com/vilm3r/sendstr-web
192 sats
\
0 comments
\
@AR0w
22 May 2023
nostr
Lazarus Infects New Batch of JavaScript Packages With Crypto Stealing Malware
decrypt.co/309669/lazarus-javascript-crypto-stealing-malware
1161 sats
\
0 comments
\
@k00b
13 Mar 2025
security
Ethereum core dev’s crypto wallet drained by malicious AI extension
cointelegraph.com/news/core-ethereum-devs-crypto-wallet-drained-ai-extension
180 sats
\
1 comment
\
@ea
13 Aug 2025
AI
Uv: An extremely fast Python package installer and resolver, written in Rust.
github.com/astral-sh/uv
139 sats
\
1 comment
\
@Rsync25
7 Jun 2024
rust
SVG Security Analysis Toolkit to Detect Malicious Scripts Hidden in SVG Files
cybersecuritynews.com/svg-security-analysis-toolkit/
135 sats
\
3 comments
\
@ch0k1
2 Oct 2025
news
AI Code Helpers Just Can't Stop Inventing Package Names
www.theregister.com/2024/09/30/ai_code_helpers_invent_packages/
253 sats
\
0 comments
\
@0xbitcoiner
1 Oct 2024
lol
Self-Replicating Worm Hits 180+ Software Packages
krebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/
75 sats
\
0 comments
\
@ch0k1
16 Sep 2025
news
Snyk security researcher deploys malicious NPM packages targeting Cursor.com
sourcecodered.com/snyk-malicious-npm-package/
134 sats
\
0 comments
\
@hn
14 Jan 2025
tech
Python Projects For Hacking
206 sats
\
0 comments
\
@CodeGuardianLinux
5 Apr 2024
Linux
Pylnbits: python package for Lnbits API
github.com/lightningames/pylnbits
52 sats
\
0 comments
\
@Rsync25
5 Aug 2024
lightning
X users manipulated by ChatGPT bots to visit malicious crypto sites
protos.com/x-users-manipulated-by-chatgpt-bots-to-visit-malicious-crypto-sites/
37 sats
\
0 comments
\
@rujgev
22 Aug 2023
tech
Malicious VSCode extensions with millions of installs discovered
www.bleepingcomputer.com/news/security/malicious-visual-studio-code-extensions-with-millions-of-installs-discovered/
380 sats
\
0 comments
\
@Rsync25
9 Jun 2024
security
NPM debug and chalk packages compromised
www.aikido.dev/blog/npm-debug-and-chalk-packages-compromised
263 sats
\
0 comments
\
@hn
8 Sep 2025
tech
more