North Korean-linked campaign publishes 26 malicious npm packages hiding C2 in Pastebin, deploying credential stealers & RAT via 31 Vercel deployments.
A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
Attackers used “technical assessment” projects with repeatable naming conventions to blend in cloning and build workflows, ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results