OZOliver Zehentleitnerinblog.technopathy.club·May 5 · 13 min readThe PyPI Package Was Clean. That Was the Problem.Someone uploaded a package to PyPI called: unicorn-binance-websocket-api-onion I do not maintain this package. There is no official Tor, onion, proxy, or privacy-focused variant of UNICORN Binance We00
VNVũ Nhật Lâminblog.fiscybersec.com·Apr 29 · 18 min readTrojanized Google Antigravity: When the Real Installer Is the Attacker's Best WeaponExecutive Summary On April 21, 2026, Malwarebytes documented a campaign distributing an infostealer disguised as the Google Antigravity installer — an AI coding tool launched in November 2025 that qui00
SShakincyber365.hashnode.dev·Sep 18, 2025 · 3 min readPoisoned Packages: Auditing the NPM Supply ChainThe Attack That Targeted the Supply Chain The npm ecosystem faced what security researchers call a watershed moment in September 2025 when a self-replicating worm, dubbed "Shai-Hulud," compromised over 500 packages. Named after the massive sandworms ...00
SShakincyber365.hashnode.dev·Aug 8, 2025 · 9 min readMalicious IDE Extensions: How Attackers Are Weaponizing Developer MarketplacesWhile scanning my daily security feeds this morning, I noticed something troubling: another developer lost half a million dollars to a malicious IDE extension. Not from a zero-day exploit or sophisticated APT, but from installing what looked like a l...00
HHonginsaysomething.hashnode.dev·Jun 2, 2025 · 3 min readnpm's Security Dilemma: How Malicious Packages Exploit Openness and the Path ForwardThe discovery of malicious npm packages like xlsx-to-json-lh—a six-year-old typosquatting artifact mimicking the legitimate xlsx-to-json-lc—alongside broader campaigns involving 60+ packages, underscores systemic vulnerabilities in npm's security mod...00
