---
title: "#typosquatting articles | Hashnode"
description: "Explore 6 articles tagged #typosquatting on Hashnode. Tutorials, guides, and how-tos from the community."
url: "https://hashnode.com/tag/typosquatting"
---

Tag

# #typosquatting

6 posts · 0 followers

[Oliver Zehentleitner](https://hashnode.com/@oliver-zehentleitner) · [May 5](https://hashnode.com/posts/the-pypi-package-was-clean-that-was-the-problem/69f9dd59a386d7f12182e775)

### [The PyPI Package Was Clean. That Was the Problem.](https://blog.technopathy.club/the-pypi-package-was-clean-that-was-the-problem?utm_source=hashnode&utm_medium=feed)

A near-identical clone of my Binance WebSocket library had no payload — but it spoofed identity, shadowed the import path, linked to a 404 repo, and came from the same account as pybotnet.

13 min read · [blog.technopathy.club](https://blog.technopathy.club/the-pypi-package-was-clean-that-was-the-problem?utm_source=hashnode&utm_medium=feed)

[Vũ Nhật Lâm](https://hashnode.com/@kami61) · [Apr 29](https://hashnode.com/posts/trojanized-google-antigravity-when-the-real-installer-is-the-attacker-s-best-weapon/69f1db47ad6e531c72a6d80e)

### [Trojanized Google Antigravity: When the Real Installer Is the Attacker's Best Weapon](https://blog.fiscybersec.com/trojanized-google-antigravity-when-the-real-installer-is-the-attacker-s-best-weapon?utm_source=hashnode&utm_medium=feed)

Executive Summary On April 21, 2026, Malwarebytes documented a campaign distributing an infostealer disguised as the Google Antigravity installer — an AI coding tool launched in November 2025 that qui

18 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/trojanized-google-antigravity-when-the-real-installer-is-the-attacker-s-best-weapon?utm_source=hashnode&utm_medium=feed)

[Shak](https://hashnode.com/@shak365) · [Sep 18, 2025](https://hashnode.com/posts/poisoned-packages-auditing-the-npm-supply-chain/68cbdfe6a1f262a7a8bc3a39)

### [Poisoned Packages: Auditing the NPM Supply Chain](https://cyber365.hashnode.dev/poisoned-packages-auditing-the-npm-supply-chain?utm_source=hashnode&utm_medium=feed)

Navigating the rise of self-replicating worms and credential theft in the open-source world

3 min read · [cyber365.hashnode.dev](https://cyber365.hashnode.dev/poisoned-packages-auditing-the-npm-supply-chain?utm_source=hashnode&utm_medium=feed)

[Shak](https://hashnode.com/@shak365) · [Aug 8, 2025](https://hashnode.com/posts/malicious-ide-extensions/6895582d9154dcc4fe57f574)

### [Malicious IDE Extensions: How Attackers Are Weaponizing Developer Marketplaces](https://cyber365.hashnode.dev/malicious-ide-extensions?utm_source=hashnode&utm_medium=feed)

Attackers are weaponizing developer marketplaces with malicious IDE extensions. Learn how to identify compromised plugins and protect your development

9 min read · [cyber365.hashnode.dev](https://cyber365.hashnode.dev/malicious-ide-extensions?utm_source=hashnode&utm_medium=feed)

[Hong](https://hashnode.com/@hongster) · [Jun 2, 2025](https://hashnode.com/posts/npms-security-dilemma-how-malicious-packages-exploit-openness-and-the-path-forward/683d33db26a8e807e89db00f)

### [npm's Security Dilemma: How Malicious Packages Exploit Openness and the Path Forward](https://saysomething.hashnode.dev/npms-security-dilemma-how-malicious-packages-exploit-openness-and-the-path-forward?utm_source=hashnode&utm_medium=feed)

The discovery of malicious npm packages like xlsx-to-json-lh—a six-year-old typosquatting artifact mimicking the legitimate xlsx-to-json-lc—alongside broader campaigns involving 60+ packages, underscores systemic vulnerabilities in npm's security mod...

3 min read · [saysomething.hashnode.dev](https://saysomething.hashnode.dev/npms-security-dilemma-how-malicious-packages-exploit-openness-and-the-path-forward?utm_source=hashnode&utm_medium=feed)