Fake CVE exploit repos pull frint and skytext packages to steal researcher credentials, with servers still live as of July 1.
Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...
Malicious npm packages mimicking Rollup polyfill tooling steal browser data, crypto wallets, and AI tool credentials in a Lazarus-linked campaign.
spheronFdn/spheron-mcp-plugin: Integrates with the Spheron SDK to enable compute deployment and management through Claude. vlyl/mcpc: A command-line tool for generating structured MCP server project ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results