Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Has:
npm-supply-chain-attack4 articles
Oct 17, 2026
MALFEX Campaign: Malicious npm Package 'imgdecode' Hides Shellcode Loader in Windows Native Addon — Detection and Response Guide
Introduction Security researchers have disclosed a new software supply chain campaign dubbed MALFEX, and one of its confirmed components is ...
criticalzero-daycve
Vulnerability ManagementRead Now
Oct 8, 2026
Shai-Hulud Worm Compromises tensorlake npm SDK (v0.5.144) — Detection and Remediation Guide for Credential-Theft Supply Chain Attacks
A Weaponized npm Package Just Landed in Developer Toolchains — Again Security researchers at Socket have confirmed that version 0.5.144 of t...
criticalzero-daycve
Vulnerability ManagementRead Now
Sep 18, 2026
WeaselBiscuit Stealer: 13 Malicious npm Packages Target Chrome Extension Storage — Detection and Response Guide
Introduction Open source registries remain one of the highest-leverage intrusion vectors available to state-sponsored actors, and the latest...
criticalzero-daycve
Vulnerability ManagementRead Now
Sep 18, 2026
PhantomRaven npm Infostealer: Detecting LLM-Generated Malware in Your JavaScript Supply Chain
Introduction A financially motivated threat actor has been linked to the development and distribution of PhantomRaven, a JavaScript-based in...
sigma-rulekql-detectionthreat-hunting
SOC & MDRRead Now