Software must be protected even after it has been distributed. This is because executable files, bytecode, and JavaScript ...

Malicious npm package indexed-btree hid its loader in runtime code, avoiding install hooks after logging millions of downloads.

A new ClickFix malware-as-a-service (MaaS) framework called Exvicy has been built on code lifted from a rival service, ErrTraffic.

Malicious npm package indexed-btree impersonated sorted-btree, using nearly 2M weekly downloads to steal data and deliver payloads.

A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.

North Korean threat actors, tracked as WaterPlum (also known as Contagious Interview), have compromised at least 30,000 ...

Malicious JavaScript campaigns on e-commerce storefronts evaded VirusTotal in 7 of 8 cases, exposing a structural gap in signature-based scanning. Cloudflare's graph neural network caught all eight ...

AdBlock blocks known crypto miners by default, but c/side found 3,500+ sites running stealth WebSocket miners in 2025. What each extension still misses.