Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Shai-Hulud ChainDrop npm Worm + AWS Bedrock Token-Jacking: OTX Pulse Analysis — Credential Theft Detection Pack
Shai-Hulud ChainDrop npm Worm + AWS Bedrock Token-Jacking: OTX Pulse Analysis Two fresh OTX pulses paint a converging picture: credentials a...
AsyncAPI npm Supply-Chain Compromise: sync.js RAT via Lifecycle Hooks and IPFS Payload Delivery — OTX Detection Pack
AsyncAPI npm Supply-Chain Compromise: sync.js RAT via Lifecycle Hooks and IPFS Payload Delivery Threat Summary AlienVault OTX pulse reportin...
CrowdSec Source Code Theft via TanStack Supply Chain Attack: Detection and Remediation Guide for npm/CI Environments
The Takeaway for Defenders CrowdSec — a company whose entire business is collaborative threat intelligence and intrusion prevention — has co...
Blind Eagle GitHub Loader (AsyncRAT/DcRat/XWorm) + 'Mini Shai-Hulud' npm Supply Chain Attack: OTX Pulse Analysis — Enterprise Detection Pack
Threat Summary Two AlienVault OTX pulses published 2026-08-31 reveal converging abuse of trusted developer platforms as malware delivery inf...
AsyncAPI npm Supply Chain RAT, VShell/SNOWLIGHT Go Loader & AnonyMousKIT AI PhaaS: OTX Pulse Analysis — Enterprise Detection Pack
AsyncAPI npm Supply Chain RAT, VShell/SNOWLIGHT Go Loader & AnonyMousKIT AI PhaaS: OTX Pulse Analysis — Enterprise Detection Pack Threat Sum...
keyv & cacheable npm Supply Chain Compromise: Self-Propagating Cloud Credential Theft — OTX Pulse Analysis & Enterprise Detection Pack
keyv & cacheable npm Supply Chain Compromise: Self-Propagating Cloud Credential Theft — Enterprise Detection Pack Threat Summary A live OTX ...
jscrambler npm Supply Chain Compromise: Native Binary Infostealer Injection
Threat Summary OTX Pulse data indicates a sophisticated supply chain attack targeting the JavaScript ecosystem. The jscrambler npm package (...
Supply Chain Assault & Credential Harvesting: ClickFix, LofyStealer, JINX-0164, Kali365, and Shai-Hulud Campaigns — Enterprise Detection Pack
Supply Chain Assault & Credential Harvesting: ClickFix, LofyStealer, JINX-0164, Kali365, and Shai-Hulud Campaigns Threat Summary Recent OTX ...