← Back to feed
general Help Net Security

GitHub Dependabot malware alerts now cover eight ecosystems

Help Net Security GitHub

GitHub has flagged npm malware since March 2026. Anyone pulling in a bad PyPI, Maven, RubyGems, NuGet, Go, crates.

T1598 1 IOC
Read the full story Help Net Security →

Related Coverage

general EvilTokens Abuses Microsoft Device Codes to Hijack Accounts Without Stealing Passwords GBHackers · Aug 25 general TP-Link Archer Command Injection Flaws Enable Root-Level Code Execution GBHackers · Aug 25 general Fake GTA 6 Demo Sites Spread Vidar Stealer to Hijack Authenticated Browser Sessions GBHackers · Aug 25