T1204.005 6
- Malicious Ruby Gems and Go Modules Impersonate Developer Tools to Steal Secrets and Poison CI
- Malicious Go "crypto" Module Steals Passwords and Deploys Rekoobe Backdoor
- PyPI Package Impersonates SymPy to Deliver Cryptomining Malware
- Malicious NuGet Package Typosquats Popular .NET Tracing Library to Steal Wallet Passwords
- Malicious Go Packages Impersonate Google's UUID Library and Exfiltrate Data
- Inside the GitHub Infrastructure Powering North Korea's Contagious Interview npm Attacks