Serverless Phishing Kit on GitHub Targets Mexican Banks

SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users

A new banking fraudulent operation is targeting customers of Mexican banks, fintech, payment processors, and cryptocurrency exchanges using

Nx Build Kit Security Breach: Malware Steals Wallets and Credentials via GitHub Repositories

What is s1ngularity-repository? Nx is compromised and the malware steals wallets and API keys using Claude CLI or Gemini.

prt-scan: A 5-Phase GitHub Actions Credential Theft Campaign

A throwaway GitHub account submitted 219+ malicious pull requests in a single day, each carrying a 352-line payload that steals CI secrets,

Hackers hijack thousands of sites for ClickFix and FakeUpdate attacks

DriveSurge、ClickFix、FakeUpdate攻撃で数千サイトを不正利用。マルウェア配布キャンペーンを展開。

Showing Snyk security information in GitHub code scanning

Hacker uses Trojanized Python and PHP Packages to Steal AWS Keys

Two trojanized Python and PHP packages have been uncovered revealing another instance of program source chain assault aimed at the open-sour