Malicious Jscrambler NPM package versions distributed a cross-platform credential stealer in a new supply chain attack.

OpenStrike is a Counter-Strike clone built for the PSP, and the project is already running at 60 FPS with bot rounds.

JFrog finds 148 npm proxy packages turned student browsers into a DDoS botnet, while a mutable loader lets operators re-arm ...

The attack vector is available for rent at scale, and evades AV and EDR, leaving YARA analysis as the best detection option.