Mobile Security & Privacy LiteLLM Uncovers How Leaked Master Key Led to Malicious Package Push and Software Supply Chain Compromise October 25, 2026 Pevita Pearce LiteLLM developers have disclosed the detailed chain of events behind a major security breach, revealing that an Agent Platform master key accidentally published to a public GitHub repository late last…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Supply Chain Attack Campaign October 18, 2026 Nana Muazin Cybersecurity researchers have uncovered a malicious npm package disguised as a utility library, marking the latest escalation in a sophisticated and long-running software supply chain campaign tracked under the codename…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Supply Chain Campaign October 18, 2026 Suro Senen Cybersecurity researchers have uncovered a malicious npm package disguised as an image decoding utility, marking the latest evolution in an ongoing software supply chain attack campaign tracked under the codename…
Mobile Security & Privacy Malicious "imgdecode" npm Package Discovered in Ongoing MALFEX Software Supply Chain Campaign October 17, 2026 Neng Nana Cybersecurity researchers have uncovered a newly identified malicious npm package actively circulating within the open-source software ecosystem. The package is the latest weapon in a persistent and evolving software supply…
Mobile Security & Privacy Malicious "imgdecode" npm Package Uncovered in Ongoing MALFEX Software Supply Chain Campaign October 17, 2026 Evan Lee Salim Cybersecurity researchers have uncovered a newly identified malicious npm package actively targeting Windows environments as part of an ongoing, sophisticated software supply chain attack campaign designated under the codename MALFEX.…
Mobile Security & Privacy GhostAction Campaign Strikes Again: High-Profile Open-Source Accounts Compromised to Push Malicious GitHub Workflows October 9, 2026 Ali Ikhwan Cybersecurity researchers have uncovered alarming new details regarding an ongoing credential-theft campaign known as GhostAction, which has successfully compromised high-profile open-source maintainer accounts to propagate malicious workflows across tens of…
Mobile Security & Privacy Cybersecurity Researchers Uncover New Campaign of Malicious Firefox Extensions Stealing Cryptocurrency Wallet Keys October 8, 2026 Raul Delapena Setiawan Cybersecurity researchers have uncovered a new cluster of 16 malicious Mozilla Firefox extensions specifically designed to target cryptocurrency users by stealing their wallet recovery phrases and private keys. According to…
Mobile Security & Privacy Critical Open-Source Office Vulnerability Allows Code Execution via Malicious Spreadsheets Without Warning October 6, 2026 Asep Darmawan Security researchers have uncovered a critical security vulnerability affecting two of the world’s most popular open-source office suites, LibreOffice and Apache OpenOffice. The flaw allows a maliciously crafted spreadsheet to…
Mobile Security & Privacy Malicious ‘sckit’ Worm Targets MemTensor Packages on npm and PyPI to Harvest Developer Credentials September 23, 2026 Lina Irawan Unknown threat actors have successfully compromised legitimate MemTensor packages across both the npm and Python Package Index (PyPI) software repositories in a sophisticated supply chain attack. The compromised libraries are…
