Plain-crypto-js is a malware family tracked across 2 threat clusters and 2 intelligence report mentions on ThreatCluster. First observed March 31, 2026; most recent activity June 3, 2026.
Microsoft's Threat Intelligence unit has issued a warning about a cyber campaign targeting cryptocurrency investors and software developers through compromised npm packages. The malware, embedded in two specific…
A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…