credential-theft
(5 articles)June 1, 2026
Red Hat npm Packages Backdoored to Steal Dev Credentials
30+ Red Hat npm packages under @redhat-cloud-services were backdoored with Miasma malware to steal AWS keys, SSH keys, and CI/CD tokens. Here's what you need to know.
May 29, 2026
Sicoob NuGet Package Steals Banking Credentials
A malicious Sicoob NuGet package is stealing banking credentials while npm packages target cloud secrets. Here's what developers need to check right now.
May 23, 2026
Laravel-Lang PHP Packages Hit by Credential Stealer
Laravel-Lang PHP packages were compromised to deliver a cross-platform credential stealer. Here's what developers need to know and how to protect your apps.
May 15, 2026
node-ipc npm Package Compromised to Steal Credentials
Three malicious node-ipc versions exfiltrate cloud keys, SSH tokens, and CI/CD secrets via DNS TXT queries. Check your lockfiles now.
April 22, 2026
npm Supply-Chain Worm Steals Auth Tokens Fast
A self-spreading npm supply chain attack is stealing developer tokens, API keys, and cloud credentials. See which packages are affected and how to protect yourself.