Mobile Security & Privacy Malicious ‘sckit’ Worm Targets MemTensor Packages on npm and PyPI to Harvest Developer Credentials September 23, 2026 Lina Irawan Unknown threat actors have successfully compromised legitimate MemTensor packages across both the npm and Python Package Index (PyPI) software repositories in a sophisticated supply chain attack. The compromised libraries are…
Mobile Security & Privacy Cybersecurity Researchers Discover "WeaselBiscuit" JavaScript Stealer Hiding in npm Packages September 18, 2026 Iffa Jayyana Cybersecurity researchers have uncovered a new cluster of 13 malicious npm packages designed to deliver a previously undocumented JavaScript information-stealing malware codenamed WeaselBiscuit. The discovery highlights the persistent threat of…
