Long-Running NPM Malware Campaign Accumulates 40,000 Downloads

SecurityWeek - Oct 6, 2026

Since August 2023, attackers have published eight malicious packages as part of the MALFEX supply chain campaign. The post Long-Running NPM Malware Campaign Accumulates 40,000 Downloads appeared first on SecurityWeek.

Read full article

More News

Oct 7, 2026

A.I. Music Fraudster Who Drew Millions in Royalties Is Sentenced to 18 Months

Prosecutors say Michael Smith flooded music-streaming platforms with bots that repeatedly streamed his A.I.-generated music, earning him as much as $8 million.

Oct 7, 2026

Russian lab worker's plague-linked death raises questions as Soviet files detail bioweapons cover-up

Hidden files have exposed how the Soviet Union spent decades covering up its building building and stockpiling of biological weapons, as experts raise concerns after Russia lab plague death.

Oct 7, 2026

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6. Google's own systems were not breached, but any domain ending in .gh (Ghana), .sl (Sierra Leone) or .as (American Samoa) was put at risk. With such a certificate, an attacker could pose as the real site over an encrypted

Oct 7, 2026

Russia Says It Found No ‘Emergency’ in Plague Lab

New information around the death of a lab worker, including a statement that she had been vaccinated against the plague, came as U.S. officials demanded more data.

Oct 7, 2026

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and remote access trojans (RAT) to compromised hosts. The campaign has been codenamed MALFEX by CloudSEK and Checkmarx. The activity is assessed to be the work of a lone threat actor who appears to have published 12 packages since August 2023, eight of which have

Oct 7, 2026

An A.I. Songwriting Experiment: Humans Against the Machine

Five humans convened for a weekend to create new music from scratch. Could they do better than A.I.? Could you even tell the difference?

Oct 7, 2026

Millions told to 'act now' as hurricane warnings are issued along US coast ahead of storm Isaias's Category 2 landfall

Hurricane warnings have now been issued for several US states. Storm Isaias is expected to make landfall as a Category 2 hurricane in just a few days.

Oct 7, 2026

Trump Administration Delays Threaten Funding for HIV Research

The networks also develop treatments and preventions for other infectious diseases and were instrumental in testing the Covid vaccine.

Oct 7, 2026

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways that give remote workers access to a company's network and applications. The most serious could allow an attacker without a login to send requests through the appliance and reach internal functions. SonicWall rates it 10.0 on the CVSS scale and says it has no evidence that any of the four flaws is being

Blue Planet III ventures into darkest depths of ocean

Oct 7, 2026

Long-Running NPM Malware Campaign Accumulates 40,000 Downloads

More News

A.I. Music Fraudster Who Drew Millions in Royalties Is Sentenced to 18 Months

Russian lab worker's plague-linked death raises questions as Soviet files detail bioweapons cover-up

Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains

Russia Says It Found No ‘Emergency’ in Plague Lab

Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer

An A.I. Songwriting Experiment: Humans Against the Machine

Millions told to 'act now' as hurricane warnings are issued along US coast ahead of storm Isaias's Category 2 landfall

Trump Administration Delays Threaten Funding for HIV Research

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

Blue Planet III ventures into darkest depths of ocean

Rare sea cucumber nursery near Sanikiluaq, Nunavut, could lead to commercial fishery

Tropical Storm Isaias forecast to become first Atlantic hurricane of 2026

Recommended

RFK Jr. Plans Vaccine Injury Initiative, Drawing Wary Eye From Experts

Margaret Hamilton, Whose Software Guided the Apollo Missions, Has Died

Fuel prices added to Google Maps as petrol and diesel costs soar

French PM vows to address debt despite student protests

OpenAI says teen ChatGPT use limited but research finds it an 'unacceptable risk'

What Experts Want to Know About the Russia Plague Scare

Mysterious NASA Mars photo fuels wild claim of a lost civilization on the Red Planet

Jonathan the Giant Tortoise Is 194 Years Old. He Just Had His Genome Sequenced.

There's only 1 operational nuclear reactor in Quebec — here's what it's used for

A Public Health-Minded Senator Asks: What Comes After Trump and Kennedy?