PureLogs Stealer Hides Behind Fake PDF JavaScript and Blogger Pages in New VEIL#DROP Malware Campaign

PureLogs Stealer uses fake PDF JavaScript files and Google's Blogger pages in the VEIL#DROP campaign, enabling fileless ...
Threat Post

Microsoft Research Develops Zozzle JavaScript Malware Detection Tool

As browser-based exploits and specifically JavaScript malware have shouldered their way to the top of the list of threats, browser vendors have been scrambling to find effective defenses to protect ...
The Hacker News

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.
Bleeping Computer

Stealthy new JavaScript malware infects Windows PCs with RATs

A new stealthy JavaScript loader named RATDispenser is being used to infect devices with a variety of remote access trojans (RATs) in phishing attacks. The novel loader was quick to establish ...
Yahoo Finance

Introducing Chainguard Libraries for JavaScript: Malware-Resistant Dependencies Built Entirely from Source

KIRKLAND, Wash., Sept. 25, 2025 /PRNewswire/ -- Chainguard, the trusted foundation for software development and deployment, today announced Chainguard Libraries for JavaScript, a collection of trusted ...
Dark Reading

JavaScript Malware Strikes Firewalls

2:00 PM -- In the beginning, there was application security. All ports were open to the world and practically every application had holes in it. It was like the Wild West. Eventually application ...
Threat Post

Click-Fraud Malware Spreading via JavaScript Attachments

The SANS Internet Storm Center reports a rash of malicious spam pushing Kovter click-fraud malware. A new malware campaign has been spotted that has begun seeding spam messages with a downloader ...