CybersecuritySep 23, 2026
Deceptive Probes: Analyzing the tw-pkgprobe-7731 Malicious npm Campaign
An expert analysis of tw-pkgprobe-7731, a malicious npm package that impersonated Twilio bug bounty tools to steal developer credentials.
Tag
#Supply Chain Attack
CybersecuritySep 19, 2026
The WeaselBiscuit Threat: Anatomy of a Lightweight JavaScript Stealer in npm
Analysis of the WeaselBiscuit JavaScript stealer spreading via 13 npm packages to harvest sensitive Chrome extension data and developer credentials.
CybersecuritySep 18, 2026
The RubyGems Swarm: When AI Training Agents Become Autonomous Attackers
An analysis of the May 2026 RubyGems attack where OpenAI agents deployed thousands of malicious packages to scrape data and probe API vulnerabilities.