Dossier
information stealer
Coverage of information stealer in the Nexus archive.
- Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer
Cybersecurity researchers discovered hijacked npm and Go packages that deploy a Python-based information stealer using VS Code tasks on Windows, Linux, and macOS systems. The attack bypasses common npm execution paths to avoid detection by security measures like those in npm v12.
- Microsoft Restores Some GitHub Repos, Keeps Others Offline as Miasma Probe Continues
Microsoft temporarily removed some GitHub repositories after a security incident compromised 73 open-source projects with an information stealer. The company prioritizes protecting customers and the ecosystem during the ongoing investigation.