Tag: Checkmarx
Malware hides in a B-tree library now that npm blocks install hooks
A malicious npm package pulled two million weekly downloads while running its payload from ordinary library code instead of an…
Checkmarx Breach Exposes GitHub Repository Data on Dark Web
The attacker exfiltrated source code and proprietary information from multiple GitHub repositories, prompting an ongoing investigation with law enforcement.
Malicious npm Package Targets Bitwarden Users in Multi Stage Supply Chain Attack
The attack leverages a trojanized npm package to steal credentials from developer environments connected to Bitwarden CLI workflows.
Supply Chain Attack Targets Checkmarx Users Through Malicious Docker Images and Extensions
The attack leverages both malicious Docker images on Docker Hub and fake VS Code extensions, requiring developers to verify all…