Malicious #npm packages evade install-script defenses at runtime

https://www.bleepingcomputer.com/news/security/malicious-npm-packages-evade-install-script-defenses-at-runtime/

#cybersecurity #malware

📰 Paket npm Berbahaya Hindari Proteksi Install Script dengan Menjalankan Malware Saat Runtime

👉 Baca artikel lengkap di sini: https://ahmandonk.com/2026/09/21/malware-npm-indexed-btree-runtime-supply-chain/

#cybersecurity #keamananSiber #kebocoranData #malware #npm #teknologi #vulnerability

📢 Campagne npm 'btree' : malware caché dans le prototype JS, 2 millions de téléchargements hebdomadaires

Analyse publiée par Checkmarx Zero le 17 septembre 2026, portant sur une campagne de supply chain npm active ciblant les…

🟢 vérification factuelle haute
#npm #IndexedBtree #Cyberveille

This npm loader doesn't run at install - it waits for your code to call BTree.set() with the right key. https://intel.threadlinqs.com/threat/TL-2026-2590 #ThreatIntel #C0B8XPGCKQS #indexed_btree #npm

Malicious npm package indexed-btree impersonates sorted-btree, evades install-script defenses by triggering at runtime, and uses Slack, Telegram, and Ethereum for C2 and data theft. #npm #Checkmarx #Sepolia

"GHAPPIER - One loader, sixty-five repositories, twenty-two accounts: an unreported loader family beside DPRK's PolinRider campaign" published by CloudSEK. #GitHub, #NPM, #PolinRider, #NullReceiver, #GHAPPIER https://www.cloudsek.com/blog/ghappier-malware-loader-npm-supply-chain-attack

#Development #Launches
Sidebranch · Git-based visual diffing, made easy ilo.im/16g7g6 by Cris Graña

_____
#VisualDiffing #Git #Worktrees #Frameworks #Chrome #Browsers #BrowserExtension #Npm #WebDev #Frontend

npm 12 can exit 0 while native modules are unusable. Diagnose allowScripts blocks vs missing prebuilds vs compiler failures, then approve narrowly and verify the import: https://codereportglobal.indevs.in/articles/npm-12-native-module-build-failure #npm #nodejs

npm Extends Recovery-Code Security Holds to All Accounts, by (not on Mastodon or Bluesky):

https://github.blog/changelog/2026-09-09-npm-extends-recovery-code-security-holds-to-all-accounts/?ref=frontenddogma.com

#npm #security

The WeaselBiscuit Threat: Anatomy of a Lightweight JavaScript Stealer in npm

Analysis of the WeaselBiscuit JavaScript stealer spreading via 13 npm packages to harvest sensitive Chrome extension data and developer credentials.

#npm #Malware

Read more →

iT4iNT SERVER CrowdSec Says TanStack npm Attack Led to Copy of 170 Private GitHub Repositories VDS VPS Cloud #CrowdSec #TanStack #GitHub #npm #CyberSecurity

TanStack npm attack leaked 170 CrowdSec private repos and user/investor info. #SupplyChainAttack #npm #CrowdSec #GitHub #CodeLeak #Security https://thedailytechfeed.com/tanstack-supply-chain-attack-unveils-massive-leak-of-crowdsecs-private-github-code/

npm install -g EACCES? Diagnose the active prefix first, then use nvm or a user-owned prefix instead of blanket sudo. https://codereportglobal.indevs.in/articles/fix-npm-eacces-install-global-without-sudo #npm #nodejs

⏱ Caught early: npm [email protected] was on our radar 29 days before MAL-2026-16255 went public.

#flaggedfirst #npm #malware #supplychainsecurity

Stage-only npm tokens are a really smart move for dev security. Restricting tokens to specific stages (test, staging) means automation is much safer, preventing accidental publishes to prod. Finally! 🔒 #npm #Security

New JS stealer WeaselBiscuit hits npm—targets Chrome extension storage, keystrokes. #WeaselBiscuit #npm #Malware #InfoStealer #Cybersecurity #ThreatIntel thedailytechfeed.com/weaselbiscui...

🚀 How to Deploy #Phanpy on #AlmaLinux #VPS

This article provides a guide demonstrating how to deploy Phanpy on AlmaLinux VPS.
What is Phanpy?
Phanpy is a modern alternative web frontend for #Mastodon and ...
Continued 👉 #letsencrypt #selfhosting #firewalld #fail2ban #npm #selfhosted

We just found an npm supply-chain campaign that's already earned attackers 109 ETH (~€230,933) — and it doesn't use `postinstall`. `indexed-btree` mimics sorted-btree library, has hit 2M weekly downloads.

Full writeup with all IOCs: buff.ly/9MVuuS0

#AppSec #SupplyChainSecurity #npm

CVE-2026-63472 - vendure
If your Vendure store lets customers sign in with a social or single‑sign‑on service that does not confirm the email address, an attacker could link that login to an existing…

Too many irrelevant or confusing CVEs? Use stackflag.com

#vendure #vendurehq #npm #CVE #infosec

Checking dependency upgrades is now a tool-tip away

#DependencyAssistant 1.0 is GA now

plugins.jetbrains.com/plugin/30958...

#Maven #Gradle #NPM #GitHubActions