Security Insights

Latest threat analysis, industry news, and security best practices from our expert team.

Has:
npm-compromise5 articles
Aug 31, 2026

Blind Eagle GitHub Loader (AsyncRAT/DcRat/XWorm) + 'Mini Shai-Hulud' npm Supply Chain Attack: OTX Pulse Analysis — Enterprise Detection Pack

Threat Summary Two AlienVault OTX pulses published 2026-08-31 reveal converging abuse of trusted developer platforms as malware delivery inf...

darkwebotx-pulsedarkweb-apt
Darkweb AptRead Now
Aug 28, 2026

AsyncAPI npm Supply Chain RAT, VShell/SNOWLIGHT Go Loader & AnonyMousKIT AI PhaaS: OTX Pulse Analysis — Enterprise Detection Pack

AsyncAPI npm Supply Chain RAT, VShell/SNOWLIGHT Go Loader & AnonyMousKIT AI PhaaS: OTX Pulse Analysis — Enterprise Detection Pack Threat Sum...

darkwebotx-pulsedarkweb-malware
Darkweb MalwareRead Now
Aug 6, 2026

keyv & cacheable npm Supply Chain Compromise: Self-Propagating Cloud Credential Theft — OTX Pulse Analysis & Enterprise Detection Pack

keyv & cacheable npm Supply Chain Compromise: Self-Propagating Cloud Credential Theft — Enterprise Detection Pack Threat Summary A live OTX ...

darkwebotx-pulsedarkweb-credentials
Darkweb CredentialsRead Now
Jul 13, 2026

jscrambler npm Supply Chain Compromise: Native Binary Infostealer Injection

Threat Summary OTX Pulse data indicates a sophisticated supply chain attack targeting the JavaScript ecosystem. The jscrambler npm package (...

darkwebotx-pulsedarkweb-credentials
Darkweb CredentialsRead Now
Jun 3, 2026

Supply Chain Assault & Credential Harvesting: ClickFix, LofyStealer, JINX-0164, Kali365, and Shai-Hulud Campaigns — Enterprise Detection Pack

Supply Chain Assault & Credential Harvesting: ClickFix, LofyStealer, JINX-0164, Kali365, and Shai-Hulud Campaigns Threat Summary Recent OTX ...

darkwebotx-pulsedarkweb-credentials
Darkweb CredentialsRead Now