Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

The Hacker News20 hr ago

Unknown threat actors have managed to compromise two legitimate MemTensor packages across the npm and Python Package Index (PyPI) repositories to push a platform-specific Go-based implant dubbed sckit designed for Windows, Linux, and macOS. According to reports from Aikido, SafeDep, Socket, and StepSecurity, the librar

Continue reading at The Hacker News →

Compromised MemTensor Packages Deliver sckit Credential Stealer via npm and PyPI

More on this

New Android malware RemControl steals banking PINs and blocks removal attempts

Apple’s new iOS 27 feature looks for signs you’re being scammed

New RemControl Android banking malware targets users in Europe and Canada

Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move

Cofense measures employee readiness against real-world phishing threats