Monday 06 July 2026 09:48:05 GMT+02:00

Netcrook

HomeManifesto
News
Corporate Security IncidentsCloud, SaaS & Identity SecurityIndustrial Cybersecurity & Critical InfrastructureCyber Intelligence, TrendsAI Security & Agentic SystemsCyber Intelligence & Threat TrendsCyber WarfareCyber Warfare & Nation-State OperationsCyber CriminalityBreaches & Data LeaksCybercrimeMalware & BotnetsRansomware & ExtortionSecurity Awareness & Social EngineeringLegal PolicyLegal, Policy & Government CybersecurityPrivacy, Regulation & ComplianceTechnology, InnovationTechnology, Innovation & Digital InfrastructureVulnerabilities Patch ManagementResearch, Exploits & Offensive SecurityVulnerabilities & Patch Management
Techcrook
Tutte le tecnologieIdentita e accessoFirewall e reteBackup e archiviazioneEnergia e continuitaPrivacy e sicurezza fisicaLaboratorio e prototipazioneStampa e tracciabilitaTecnologia quotidiana
Geocrook
AfricaAsiaEuropeMiddle EastNorth AmericaOceaniaSouth America
WikicrookTeamAppContact
EnglishItalianoArabic

#npm ecosystem

Fake Logger, Real Risk: The npm Package That Turned Install Time Into an Intrusion Path

30 May 2026 07:31Malware & BotnetsNEXUSGUARDIAN

A malicious JavaScript dependency reportedly evolved in plain sight, then used a trusted developer workflow and a legitimate AI platform as cover for a stealthier supply-chain operation.

#Hugging Face | #js-logger-pack | #npm ecosystem

When Package Trust Becomes the Attack Surface

20 May 2026 10:32Malware & BotnetsNorth America / USAIRONQUERY

A sprawling npm supply-chain incident shows how a single publishing path can ripple through developer tooling, while provenance metadata may look reassuring even when it is part of the problem.

#Mini Shai-Hulud | #npm ecosystem | #Sigstore provenance