Tag: Typosquatting
StubMaker typosquats Ruby libraries to drain browser wallets
OpenSourceMalware is tracking StubMaker, a campaign of 16 typosquatted RubyGems packages that drops a Windows infostealer on developers.
AI slop-squatted npm packages hide WEL1DROPPER malware
Nearly 800 npm packages hide a cross-platform RAT and infostealer behind fake README instructions.
NuGet package NewJson.Net delivers game cheats inside working library fork
A trojanized Newtonsoft.Json fork on NuGet smuggles game-rigging malware inside a fully functional serialization library to evade detection.
Deceptive Go Package Hides DNS Backdoor for Years in Supply Chain Attack
A typosquatted Go package remained dormant for years before activating a DNS based backdoor that persists even after its GitHub…