News

Source: socket.dev - Ongoing Supply Chain Attack Targets CrowdStrike npm Packages A persistent supply chain attack, dubbed the “Shai-Halud” campaign, has escalated with multiple CrowdStrike npm packages now compromised. This campaign, first linked to Tinycolor and over 40 other npm packages, uses malicious code to stealthily seek and steal

Source: cyberpolice.gov.ua Neutralizing a High-Impact Hacker Group On September 11, 2025, Ukrainian law enforcement announced the successful dismantling of a hacker group responsible for deploying ransomware attacks on top global firms. These attacks caused billions in losses worldwide. * Many members arrested, prosecuted, and had assets frozen * One leader

Source: rekt.news - The Great NPM Heist Supply chain attacks struck the JavaScript ecosystem last week, targeting vital npm packages used by millions worldwide. Core utilities like chalk, debug, and ansi-styles, essential for development from startups to Fortune 500 firms, were compromised with sophisticated crypto-stealing malware. This malware aimed

Source: Coinbase Thinks ‘Vibe Coding’ 50% of Its Platform Is a Good Idea Coinbase CEO Brian Armstrong recently tweeted that about 40% of the code for his cryptocurrency exchange is currently AI-generated, with a goal to exceed 50% by October. While Armstrong emphasized that AI-generated code is always reviewed and

Source: Paradigm’s Reth Client Bug Briefly Freezes Ethereum Mainnet Nodes A technical glitch in Paradigm's Ethereum execution client, Reth, caused a brief halt for some Ethereum nodes, underlining the challenges of maintaining diverse client software in a decentralized network. What Happened? * The problem appeared at block 2,

Source: Largest NPM Supply Chain Attack Steals a Few Cents Earlier, an attacker successfully hijacked the NPM account qix, which manages widely used packages like chalk and debug-js. Combined, these packages receive over 2 billion weekly downloads, making this breach the largest supply chain attack recorded in history. How the