PureLogs Stealer Hides Behind Fake PDF JavaScript and Blogger Pages in New VEIL#DROP Malware Campaign

PureLogs Stealer uses fake PDF JavaScript files and Google's Blogger pages in the VEIL#DROP campaign, enabling fileless ...
The Hacker News

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

The campaign spans npm, Packagist, Go, and Chrome, using obfuscated JavaScript loaders and VS Code tasks to deliver malware.
Threat Post

Microsoft Research Develops Zozzle JavaScript Malware Detection Tool

As browser-based exploits and specifically JavaScript malware have shouldered their way to the top of the list of threats, browser vendors have been scrambling to find effective defenses to protect ...
Yahoo Finance

Introducing Chainguard Libraries for JavaScript: Malware-Resistant Dependencies Built Entirely from Source

KIRKLAND, Wash., Sept. 25, 2025 /PRNewswire/ -- Chainguard, the trusted foundation for software development and deployment, today announced Chainguard Libraries for JavaScript, a collection of trusted ...
Bleeping Computer

Stealthy new JavaScript malware infects Windows PCs with RATs

A new stealthy JavaScript loader named RATDispenser is being used to infect devices with a variety of remote access trojans (RATs) in phishing attacks. The novel loader was quick to establish ...
Threat Post

Click-Fraud Malware Spreading via JavaScript Attachments

The SANS Internet Storm Center reports a rash of malicious spam pushing Kovter click-fraud malware. A new malware campaign has been spotted that has begun seeding spam messages with a downloader ...