Cybercrime

Cybercrime | News, how-tos, features, reviews, and videos

Documentation placeholder domain used in ClickFix attacks

Following instructions can lead to bad things, as this increasingly common attack method can bypass Windows protections.

By Maxwell Cooter

Sep 25, 20262 mins

CybercrimeMalwareSecurity

New npm malware finds a way around install script defenses

By Shweta Sharma

Sep 21, 20263 mins

Code SecurityCybercrimeMalware

OpenAI’s cyber defense letter gets the diagnosis right and the prescription wrong

By Brad LaPorte

Sep 21, 20266 mins

CyberattacksCybercrimeData and Information Security

Articles

Meet Hades: The malware that lies to AI security agents

Researchers have uncovered a supply-chain attack that hides in Python packages, propagates like a worm, and tricks LLM-based code analysis systems into overlooking malicious payloads.

By Taryn Plumb

Jun 9, 2026 5 mins

CybercrimeMalwarePython

Microsoft identifies seven new ways AI agents can be hacked

The more you look at AI agents, the more it seems can go wrong with them, so Microsoft has extended its taxonomy of failure modes to help with discussion of possible fixes.

By Maxwell Cooter

Jun 5, 2026 2 mins

Artificial IntelligenceCyberattacksCybercrime

AntV data visualization tool the latest to be hit by ongoing npm supply chain attacks

The largest incident yet is a warning that developers should urgently check package security, say experts.

By John E. Dunn

May 19, 2026 4 mins

CyberattacksCybercrimeDevelopment Tools

Mistral AI SDK, TanStack Router hit in npm software supply chain attack

Hundreds of software packages are affected, once again threatening enterprise credentials on coders’ machines.

By John E. Dunn

May 12, 2026 4 mins

Application SecurityCyberattacksDevSecOps

SAP npm package attack highlights risks in developer tools and CI/CD pipelines

Researchers say the campaign targeted developer credentials and cloud secrets while abusing trusted publishing and AI coding tool configurations.

By Prasanth Aby Thomas

Apr 30, 2026 4 mins

CyberattacksCybercrimeDevelopment Tools

Malicious pgserve, automagik developer tools found in npm registry

Fake packages aim to steal data, credentials, and secrets, and to infect every package created using them, in what could be ‘a complete organizational takeover’.

By Howard Solomon

Apr 22, 2026 7 mins

CybercrimeDevelopment ToolsMalware

Anthropic employee error exposes Claude Code source

A version of the AI coding tool in Anthropic's npm registry included a source map file, which leads to the full proprietary source code.

By Howard Solomon

Mar 31, 2026 5 mins

Artificial IntelligenceData BreachSecurity

New ‘StoatWaffle’ malware auto‑executes attacks on developers

The newly observed malware abuses VS Code’s “runOn:folderOpen” feature to execute automatically from trusted projects, enabling near-frictionless compromise.

By Shweta Sharma

Mar 24, 2026 3 mins

DeveloperMalwareSecurity

Open VSX extensions hijacked: GlassWorm malware spreads via dependency abuse

Threat actors are publishing clean extensions that later update to depend on hidden payload packages, bypassing marketplace checks and silently installing malware onto developers’ systems.

By Shweta Sharma

Mar 16, 2026 3 mins

CybercrimeDevelopment ToolsMalware

Microsoft warns of job‑themed repo lures targeting developers with multi‑stage backdoors

Attackers used “technical assessment” projects with repeatable naming conventions to blend in cloning and build workflows, retrieving loader scripts from remote infrastructure, and minimizing on-disk traces.

By Shweta Sharma

Feb 25, 2026 3 mins

CareersDeveloperMalware