The Hacker News: ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Action Patch + 28 New Stories
Help Net Security: Fake Spotify Premium tutorials on TikTok and Instagram Reels spread malware
Infosecurity Magazine: Fake Software Tutorials on TikTok Spread Vidar Stealer
Security Week: Supply Chain Attack Hits 32 Red Hat NPM Packages
Infosecurity Magazine: Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets
Infosecurity: Malicious npm Dependency Linked to AI Assisted Commit Targets Crypto Wallets
Hackread: GraphAlgo Scam: Lazarus Hackers Register Real US LLCs to Spread Malware
SecurityWeek: Axios NPM Package Breached in North Korean Supply Chain Attack
Hackread: New Ghost Campaign Uses Fake npm Progress Bars to Phish Sudo Passwords
Hacker News: Ghost Campaign Uses 7 npm Packages to Steal Crypto Wallets and Credentials
Tech Radar: North Korean job scammers target JavaScript and Python developers with fake interview tasks spreading malware
Security Affairs: Malicious npm and PyPI packages linked to Lazarus APT fake recruiter campaign
Hacker News: Lazarus Campaign Plants Malicious Packages in npm and PyPI Ecosystems
Help Net Security: Open-source attacks move through normal development workflows
