Mastra npm packages added easy-day-js malware, exposing developer systems and CI runners to infostealer risks.

As browser-based exploits and specifically JavaScript malware have shouldered their way to the top of the list of threats, browser vendors have been scrambling to find effective defenses to protect ...

The risk in the JavaScript ecosystem isn't theoretical: earlier this month, a number of packages used by millions of developers were compromised via malicious code. These malware attacks against ...

A new stealthy JavaScript loader named RATDispenser is being used to infect devices with a variety of remote access trojans (RATs) in phishing attacks. The novel loader was quick to establish ...

Three popular plugins served malicious JavaScript through a compromised CDN.

The SANS Internet Storm Center reports a rash of malicious spam pushing Kovter click-fraud malware. A new malware campaign has been spotted that has begun seeding spam messages with a downloader ...

eFile.com, an IRS-authorized e-file software service provider used by many for filing their tax returns, has been caught serving JavaScript malware. Security researchers state the malicious JavaScript ...