Blackpoint uncovers ChainScript, a Node.js RAT that queries a Polygon smart contract to find and rotate its command server.

A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.

September 17 technical disclosure explaining how a removed npm package waited for normal application calls before activating, ...

An ongoing npm malware campaign involving the 'indexed-btree' package shows how threat actors bypass supply chain defenses by ...

Hackers used a malicious worker to inject scripts into more than 100,000 websites via the Brevo supply chain attack.

Google found AI malware that can rewrite itself to evade detection as newer attacks show how quickly cyberthreats are ...

Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy Ghouls, according to multiple reports from Kaspersky. The cybersecurity ...

SloppyRAT uses ClickFix to help ransomware attackers gain access, gather data, and spread across compromised networks.

A technician-grade script that wrestles with deprecated tools, requires prep steps, then runs an exhaustive cleanup.

MISSOULA, Mont. — Missoula postal workers are raising concerns that plans to remove a letter-sorting machine from the city’s distribution center will slow mail delivery in western Montana. Shawn ...

Best Antivirus Software Malwarebytes Review 2026: Test Results, Real Costs, and is It Safe? From $44.99 for the first year. Pricing verified September 2026. Table of Contents Malwarebytes reviews used ...