pull down to refresh

Malicious NPM Package Posing as OpenClaw Installer Deploys RAT, Steals OS Datathehackernews.com/2026/03/malicious-npm-package-posing-as.html
144 sats \ 0 comments \ @ch0k1 4h news
related
Compromised npm package silently installs OpenClaw on developer machineswww.csoonline.com/article/4135449/compromised-npm-package-silently-installs-openclaw-on-developer-machines.html
422 sats \ 4 comments \ @winteryeti 24 Feb AI
Android Trojan Campaign Uses Hugging Face Hosting for RAT Payload Deliverywww.bitdefender.com/en-us/blog/labs/android-trojan-campaign-hugging-face-hosting-rat-payload
130 sats \ 0 comments \ @0xbitcoiner 29 Jan AI
Nearly 20% of Docker Hub Repositories Spread Malware & Phishing Scamsjfrog.com/blog/attacks-on-docker-with-millions-of-malicious-repositories-spread-malware-and-phishing-scams/
164 sats \ 1 comment \ @nym 30 Apr 2024 security
Hacker Used Anthropic’s Claude to Steal Sensitive Mexican Data - Bloombergwww.bloomberg.com/news/articles/2026-02-25/hacker-used-anthropic-s-claude-to-steal-sensitive-mexican-data
643 sats \ 1 comment \ @Scoresby 25 Feb AI
A NixOS User's Guide to openclaw
2591 sats \ 0 comments \ @nerd2ninja 1 Feb AI
Hacking campaign compromised at least 16 Chrome browser extensionssecurityaffairs.com/172491/hacking/chrome-browser-extensions-compromise.html
266 sats \ 0 comments \ @nym 1 Jan 2025 security
firefox-patch-bin, librewolf-fix-bin and other AUR packages contain malwarelists.archlinux.org/archives/list/aur-general@lists.archlinux.org/thread/7EZTJXLIAQLARQNTMEW2HBWZYE626IFJ/
408 sats \ 2 comments \ @k00b 24 Jul 2025 security
Cyberspies Hacked Cisco Firewalls to Access Government Networkswww.wired.com/story/arcanedoor-cyberspies-hacked-cisco-firewalls-to-access-government-networks/
48 sats \ 0 comments \ @nym 25 Apr 2024 security
FBI Warns U.S. Healthcare Sector of Targeted BlackCat Ransomware Attacksthehackernews.com/2024/02/fbi-warns-us-healthcare-sector-of.html
140 sats \ 0 comments \ @doofus 28 Feb 2024 security
The XZ Backdoor: Everything You Need to Knowwww.wired.com/story/xz-backdoor-everything-you-need-to-know/#intcid=recommendations_wired-bottom-recirc-v4_cf3e2538-ba66-4408-a9c0-3af3ee784b35_similar2-3_fallback_cral2-2
74 sats \ 0 comments \ @nym 25 Apr 2024 security
280+ Leaky Skills: How OpenClaw & ClawHub Are Exposing API Keys and PIIsnyk.io/blog/openclaw-skills-credential-leaks-research/
1030 sats \ 1 comment \ @0xbitcoiner 6 Feb AI
ClawJacked attack let malicious websites hijack OpenClaw to steal datawww.bleepingcomputer.com/news/security/clawjacked-attack-let-malicious-websites-hijack-openclaw-to-steal-data/
255 sats \ 0 comments \ @winteryeti 2 Mar tech
We Just Found Malicious Code in the Popular NPM Packagejdstaerk.substack.com/p/we-just-found-malicious-code-in-the
1497 sats \ 18 comments \ @kristapsk 8 Sep 2025 security
Self-Replicating Worm Hits 180+ Software Packageskrebsonsecurity.com/2025/09/self-replicating-worm-hits-180-software-packages/
75 sats \ 0 comments \ @ch0k1 16 Sep 2025 news
Black Cat Hacker Group with Fake Notepad++ Sites to Install Malware & Steal Datacybersecuritynews.com/black-cat-hacker-group-with-fake-notepad-sites/
193 sats \ 1 comment \ @winteryeti 8 Jan tech
Bogus npm Packages Used to Trick Software Developers into Installing Malwarethehackernews.com/2024/04/bogus-npm-packages-used-to-trick.html?m=1
52 sats \ 1 comment \ @ch0k1 28 Apr 2024 security
An OpenClaw Bot Spawned a Child (and paid for it)x.com/getAlby/status/2021613700944474151
214 sats \ 3 comments \ @supratic 18 Feb AI lightning
Hackers used new Windows Defender zero-day to drop DarkMe malwarewww.bleepingcomputer.com/news/security/hackers-used-new-windows-defender-zero-day-to-drop-darkme-malware/
339 sats \ 0 comments \ @ch0k1 14 Feb 2024 security
I Effed around and Found out about Openclaw so You Don't Have to
6959 sats \ 43 comments \ @billytheked 10 Feb AI
100+ backdoored malware repos traced to single GitHub userwww.theregister.com/2025/06/05/backdoored_malware_repos
151 sats \ 1 comment \ @Coinsreporter 5 Jun 2025 security
ThreatsDay: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusionsthehackernews.com/2026/02/threatsday-bulletin-codespaces-rce.html
96 sats \ 0 comments \ @ch0k1 7 Feb news