Malware

Coverage of malicious software including trojans, ransomware, and other threats — how they work, how they spread, and how to defend against them.

Reading List

Damage Control

GitHub Internal Repos Breached via Malicious VS Code Extension

May 20, 20261054

GitHub suffered an internal repository breach after an employee installed a malicious VS Code extension, with hackers now attempting to sell the stolen code.

Cybersecurity Supply Chain Security Malware Developer Tooling

Damage Control

Critical Supply-Chain Attack Hits TanStack Router NPM Packages

May 11, 20261095

A self-propagating supply-chain attack has poisoned TanStack Router npm packages to steal credentials and infect further repositories.

Supply Chain Security Malware GitHub Actions Package Management

Damage Control

Bitwarden CLI Compromised in CI/CD Supply Chain Attack

Apr 23, 2026865

Bitwarden CLI version 2026.4.0 was compromised in a supply chain attack that uses a malicious CI/CD injection to harvest cloud and developer credentials.

Supply Chain Security CI/CD Malware GitHub Actions API Key Security

Damage Control

The Essential Plugin Attack: 30+ WordPress Plugins Weaponized via Supply Chain

Apr 13, 20261182

A malicious actor weaponized a portfolio of 30+ acquired WordPress plugins to conduct a massive, blockchain-coordinated supply chain attack.

Supply Chain Security Malware Vulnerability Research WordPress Plugin Security

Damage Control

Axios npm Supply Chain Attack: Hijacked Account Drops Cross-Platform RAT

Mar 31, 20261925

A hijacked maintainer account was used to poison the axios npm package with a sophisticated, self-cleaning Remote Access Trojan targeting multiple operating systems.

Supply Chain Security Cybersecurity Package Management Malware