T1059.004 5
- Large-Scale GitHub Actions Abuse Powers a Distributed cPanel and WHM Exploitation Campaign
- Malicious Ruby Gems and Go Modules Impersonate Developer Tools to Steal Secrets and Poison CI
- Malicious Go "crypto" Module Steals Passwords and Deploys Rekoobe Backdoor
- Typosquatted Go Packages Deliver Malware Loader Targeting Linux and macOS Systems
- Weaponizing OAST: How Malicious Packages Exploit npm, PyPI, and RubyGems for Data Exfiltration and Recon