Malicious Chrome and Firefox Extensions Steal Crypto Traders’ Session and Wallet Data

Malicious Chrome and Firefox extensions target Axiom Trade and Padre users, stealing session tokens and wallet data.

Sep 9, 2026 Malware, Browser Extensions

OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack

Ten malicious OpenAPI React Query Codegen versions were published to npm in the Mini Shai-Hulud attack, all with valid provenance.

Aug 28, 2026 Malware, npm

Popular Rust Crates Compromised in Build-Time Supply Chain Attack

Three compromised Rust crates pulled in a malicious dependency that downloaded and executed cross-platform malware during Cargo builds.

Aug 20, 2026 Malware, Rust

77 Firefox Extensions Linked to Crypto Wallet and Credential Theft

Socket uncovered 77 linked Firefox extensions, including 40 that steal wallet secrets or credentials and 37 deceptive sports-score shells.

Aug 19, 2026 Malware, Browser Extensions

Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign

A large-scale campaign abused GitHub Actions in compromised repositories to exploit CVE-2026-41940 in cPanel and WHM and steal server credentials.

Jul 22, 2026 GitHub Investigations

Malicious Go Module Exposes GitHub Malware Lure Network Spanning 222 Repositories

Socket tracks the activity as Operation “Muck and Load”: a threat actor uses commit-farming workflows, public dead drops, and protected archives to stage Windows RAT and infostealer malware.

Jul 8, 2026 Malware, Go

Chrome and Firefox Extensions Posing as Free VPNs Add Clipboard Stealers via Malicious Updates

Malicious Chrome and Firefox extensions posed as free VPNs while stealing clipboard data through later extension updates.

Jun 29, 2026 Malware, Browser Extensions

Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages

Miasma Mini Shai-Hulud hits @immobiliarelabs Backstage plugins, targeting GitLab and LDAP auth packages on npm.

Jun 26, 2026 Malware, npm

Miasma Mini Shai-Hulud Hits LeoPlatform npm Packages and GitHub Actions, Expands to the Go Ecosystem

Mini Shai-Hulud expands into the Go ecosystem after hitting LeoPlatform npm packages and targeting GitHub Actions workflows.

Jun 25, 2026 Malware, Go

Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels

Newer packages in this compromise use native extensions and .pth loaders to execute JavaScript stealers in developer environments.

Jun 8, 2026 Malware, PyPI