← Home
#credential-harvesting
3 stories tagged.
The Worm That Learned to Sign Itself: Shai Hulud's Eight-Month npm Supply Chain Rampage — A Full Post-Mortem
12 min · 0 sources
The Guardians Were Already Compromised: TeamPCP's Second Checkmarx Strike and the April 2026 Triple-Registry Credential Harvest
9 min · 0 sources
The Fortune 500 Faker: How Attackers Impersonated Asurion's npm Packages to Run a Multi-Stage Credential Harvester
11 min · 0 sources