Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Equation of Compromise: npm Supply-Chain Loader with Ethereum Smart Contract C2 — OTX Pulse Detection Pack
Equation of Compromise: npm Supply-Chain Loader with Ethereum Smart Contract C2 TLP: WHITE | Intelligence Category: Active Malware Campaigns...
Malicious npm Package 'tw-pkgprobe-7731' Poses as Twilio Bug-Bounty Tool — Detection and Remediation Guide
Introduction On September 2026, cybersecurity researchers disclosed a malicious npm package named tw-pkgprobe-7731 that impersonates a secur...
indexed-btree npm Malware Hid Loader in Runtime Code: Detection and Remediation Guide
Introduction Checkmarx reported that the npm package indexed-btree was malicious and impersonated the legitimate sorted-btree package, a rou...
Contagious Interview: DPRK Campaign Hits 30,000 Devices, Steals $10.71M in Crypto — Detection and Defense Guide
Introduction A new joint cybersecurity advisory has put hard numbers behind a campaign many of us in the IR community have been tracking for...
Ransomware Developer Sentenced, Plugin4Shell AI Attack, and Critical SAP Flaw: Defender's Playbook for This Week's Under-the-Radar Threats
Introduction SecurityWeek's latest "In Other News" roundup bundles several stories that individually might not have dominated headlines this...
TanStack npm Supply Chain Attack: 170 Private GitHub Repos Exfiltrated — Detection and Remediation Guide for Credential Theft and Orphaned Access
Introduction On September 18, 2026, French security company CrowdSec disclosed that an attacker copied approximately 170 of its private GitH...
PhantomRaven: LLM-Generated npm Infostealer Masquerading as Bug Bounty Research — Detection and Response Guide
PhantomRaven: When the Supply-Chain Attack Writes Its Own Cover Story CrowdStrike's Counter Adversary Operations team recently published res...
CVE-2026-76969: Critical @sap/cds-mtxs npm Vulnerability (CVSS 9.4) — Detection, Hunting, and Remediation Guide for SAP CAP Multitenant Applications
Introduction The NVD has published CVE-2026-76969, a CVSS 9.4 (CRITICAL) vulnerability in @sap/cds-mtxs, the npm package that provides multi...
DEV#POPPER npm RAT, Flying Eagle Android Botnet & APT28 Moobot Resurgence: OTX Pulse Analysis — Multi-Platform Detection Pack
DEVPOPPER npm RAT, Flying Eagle Android Botnet & APT28 Moobot Resurgence: Multi-Platform Threat Intelligence Bulletin Threat Summary Three c...