Back to Blog

#Malware

4 posts
Axios npm compromise pushed a cross-platform RAT through a fake dependency
Supply Chain Security
npm Security
Supply Chain Attack

Axios npm compromise pushed a cross-platform RAT through a fake dependency

Axios npm compromise pushed a cross-platform RAT through a fake dependency A compromise of the widely used axios package on npm shows why defenders cannot rely...

April 1, 2026
5 min read
Lucas Oliveira
Trivy GitHub Action compromise exposed CI/CD secrets in a stealth supply-chain attack
supply chain attack
Incident
Threat Intel

Trivy GitHub Action compromise exposed CI/CD secrets in a stealth supply-chain attack

Trivy GitHub Action compromise exposed CI/CD secrets in a stealth supply-chain attack A supply-chain compromise in Aqua Security’s aquasecurity/trivy-action sho...

March 22, 2026
4 min read
Lucas Oliveira
GlassWorm Shifts to Transitive Open VSX Dependencies in Developer Supply-Chain Push
Threat Hunting & Intel
Incident
Threat Intel

GlassWorm Shifts to Transitive Open VSX Dependencies in Developer Supply-Chain Push

GlassWorm Shifts to Transitive Open VSX Dependencies in Developer Supply-Chain Push GlassWorm is no longer just a story about obviously malicious extensions. Th...

March 21, 2026
5 min read
Lucas Oliveira
Slopoly Shows How AI-Generated Malware Is Entering Ransomware Operations
Threat Hunting & Intel
ransomware
Threat Intel

Slopoly Shows How AI-Generated Malware Is Entering Ransomware Operations

Slopoly Shows How AI-Generated Malware Is Entering Ransomware Operations | 2026 Executive Summary IBM X-Force says a ransomware-linked intrusion involved a like...

March 17, 2026
4 min read
Lucas Oliveira

Tags

CVE
23
Credential Theft
6
Account Takeover
5
Cisco
4
AI Security
3
Authentication Bypass
3
CI/CD Security
3
AWS
2
Browser Security
2
Crypto
2