Monday 06 July 2026 02:12:40 GMT+02:00
Netcrook
#NPM Typosquatting
A Lookalike npm Name, Then a Windows Script Chain: The Supply-Chain Trap Behind a RAT Drop
A typosquatted package in the npm ecosystem shows how a single confusing name can hand attackers a path from dependency install to Windows-native execution.
npm Typosquatting Turns Package Installs Into a Wallet Risk
Malicious lookalike packages in the npm ecosystem can turn routine dependency installs into a supply-chain execution event for Web3 teams and crypto wallet operators.
Lookalike npm Packages Put Developer Secrets in the Crosshairs
A typosquatting wave in the npm ecosystem is a reminder that one routine install can become a high-value secret hunt.
Stealth by Pixels: How Hackers Use Images to Hijack Developer Machines Worldwide
Cybercriminals are weaponizing innocent-looking PNG files to evade security tools and deploy powerful remote access trojans onto Windows systems via poisoned NPM packages.