T1656 7
- Fake imToken Chrome Extension Steals Seed Phrases via Phishing Redirects
- Malicious Go "crypto" Module Steals Passwords and Deploys Rekoobe Backdoor
- PyPI Package Impersonates SymPy to Deliver Cryptomining Malware
- Spearphishing Campaign Abuses npm Registry to Target U.S. and Allied Manufacturing and Healthcare Organizations
- Malicious NuGet Package Typosquats Popular .NET Tracing Library to Steal Wallet Passwords
- Malicious Go Packages Impersonate Google's UUID Library and Exfiltrate Data
- Inside the GitHub Infrastructure Powering North Korea's Contagious Interview npm Attacks