Tag: supply chain attack

GhostAction Attack Hijacks 500+ GitHub Accounts to Steal API Keys

GhostAction Attack Hijacks 500+ GitHub Accounts to Stea...

Ashif Sadique Oct 12, 2026 5 min read 0

A supply-chain campaign called GhostAction has hit 500+ GitHub accounts, plantin...

npm Malware Used an Ethereum Contract to Dodge Takedowns

npm Malware Used an Ethereum Contract to Dodge Takedowns

Code24 Team Sep 22, 2026 5 min read 0

A fake npm package with 2 million weekly downloads hid malware that used an Ethe...

Vibe-Coded Malware in VS Code Marketplace: Why Developer Tools Are Now Front-Line Threats

Vibe-Coded Malware in VS Code Marketplace: Why Develope...

Ashif Sadique Nov 7, 2025 5 min read 0

A malicious VS Code extension dubbed “vibe-coded” slipped into the official mark...