Pierluigi Paganini
May 24, 2026
Malware Newsletter
Popular node-ipc npm Package Infected with Credential Stealer
New Actors Deploy Shai-Hulud Clones: TeamPCP Copycats Are Here
Active Supply Chain Attack Compromises @antv Packages on npm
Void Botnet uses Ethereum smart contracts for seizure-resistant C2
Kash Patel’s clothing brand website shut down after reports it was hacked
Megalodon: Mass GitHub Repo Backdooring via CI Workflows
Updated UAC-0057 toolkit: OYSTERFRESH, OYSTERSHUCK and OYSTERBLUES
Tracking Iranian APT Screening Serpens’ 2026 Espionage Campaigns
A Large Language Model Approach to Generating Bypass Rules for Malware Evasion in Analysis Sandbox
Detecting Ransomware Through Dynamic API Call Monitoring and Machine Learning
MalwarePT: A Binary-Level Foundation Model for Malware Analysis
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, newsletter)
