Related Threat Clusters
-
Malware Spread via Fake Polymarket Trading Bot Targets DeFi Developers
On July 1, 2026, security firm SlowMist identified a fake trading bot on GitHub designed to spread malware targeting Polymarket users and DeFi developers. The bot, named 'polymarket-arbitrage-bot', was promoted as a…
2 articles · Updated July 1, 2026 -
North Korean Hackers Target Open Source Software Supply Chain via npm Packages
Amazon's threat intelligence has linked a series of compromises of popular npm packages—axios, debug, chalk, and typo-crypto—to a North Korean hacking group known as Sapphire Sleet. The group employed social engineering…
11 articles · Updated July 29, 2026 -
Supply Chain Attack Compromises Popular Rust Crates to Deliver Malware
On August 20, 2026, a supply chain attack targeted the Rust ecosystem, compromising the widely used crates arrayref, append-only-vec, and internment. The attackers injected a malicious dependency, proc-macro1, which…
22 articles · Updated August 20, 2026 -
China-aligned APT Groups Target Global Maritime and Tech Sectors Amid Geopolitical Tensions
ESET's latest APT Activity Report reveals that from October 2025 to March 2026, China-aligned threat actors engaged in extensive espionage campaigns, particularly in Venezuela and the Gulf region. Following U.S.…
6 articles · Updated May 28, 2026 -
Microsoft Alerts on npm Malware Targeting Cryptocurrency Wallets
Microsoft's Threat Intelligence unit has issued a warning about a cyber campaign targeting cryptocurrency investors and software developers through compromised npm packages. The malware, embedded in two specific…
3 articles · Updated June 3, 2026 -
Fedora NextCloud Update Addresses JSON Tampering and DoS Vulnerabilities
On June 5, 2026, Fedora released updates for NextCloud addressing two critical vulnerabilities: CVE-2026-42044 and CVE-2026-44167. CVE-2026-42044 involves JSON response tampering via prototype pollution in Axios, while…
2 articles · Updated June 5, 2026 -
Glassworm Botnet Targeting Developers Disrupted by CrowdStrike and Google
The Glassworm botnet, which has targeted software developers since early 2025, was taken down in a coordinated operation by CrowdStrike, Google, and the Shadowserver Foundation on May 26, 2026. This botnet utilized…
30 articles · Updated May 27, 2026 -
Mini Shai-Hulud Supply Chain Attack Targets SAP npm Packages
A new supply chain attack, dubbed 'Mini Shai-Hulud', has compromised multiple npm packages related to SAP's Cloud Application Programming Model (CAP). This attack involves injecting malicious preinstall scripts into…
751 articles · Updated April 29, 2026 -
GitHub Breach: 3,800 Internal Repositories Compromised via Malicious VS Code Extension
On May 20, 2026, GitHub confirmed a significant security breach involving a poisoned Visual Studio Code (VS Code) extension that compromised an employee's device. The attack, attributed to the TeamPCP hacking group,…
149 articles · Updated May 20, 2026 -
OpenAI Issues Urgent Security Update Following Axios Compromise
OpenAI has identified a security issue involving the third-party developer library Axios, which was compromised on March 31, 2026, as part of a broader software supply chain attack. The attack did not result in any user…
30 articles · Updated April 11, 2026
Recent Intelligence Reports
- Sentry MCP Server SSRF Exposes How Agent Trust Chains Become Attack Vectors — Cryptorank · August 28, 2026
- Sentry MCP Server SSRF Exposes How Agent Trust Chains Become Attack Vectors — Forkast.News · August 27, 2026
- North Korean Hackers Tied to Rust Supply Chain Attack — Infosecurity-Magazine · August 21, 2026
- Did North Korean hackers launch the supply chain attack on arrayref? — www.cryptopolitan.com · August 21, 2026
- Hackers poison arrayref Rust crate to push infostealer malware — Bleepingcomputer · August 20, 2026
- Amazon pins multiple open source compromises on North Korea — Computerweekly · July 30, 2026
- Attackers deliver infostealer to Polymarket trading bot users, DeFi devs through npm packages — Mexc · July 1, 2026
- DeFi devs, Polymarket trading bot users targeted in fresh info — Cryptopolitan · July 1, 2026