18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users
More on Cross-Platform
Other advisories
- MediumCVE-2026-39311Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. Versions 0.102.1 and prior contai…
- HighCVE-2026-39310Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, th…
- MediumCVE-2026-39309Trilium Notes is a cross-platform, hierarchical note taking application focused on building large personal knowledge bases. In versions 0.102.1 and prior, th…
- MediumCVE-2026-35593Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases. Versions 0.102.1 and prior …
- CriticalCVE-2026-33642Kitty is a cross-platform GPU based terminal. In versions 0.46.2 and below, the handle_compose_command() function in kitty/graphics.c performs bounds validat…
- HighCVE-2026-33633Kitty is a cross-platform GPU based terminal. Versions 0.46.2 and below contain a heap buffer overflow in load_image_data() that allows any process which can…
- MediumCVE-2026-42598Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers. From 2.4.0, to before 2.13.0, when requesting cont…
- CriticalCVE-2026-44225Pulpy is a lightweight, cross-platform desktop application packager for web apps. Prior to 0.1.1, Pulpy injects a pulpy.fs JavaScript API into every packaged…
Other news entries
- WeChat worm could pwn a friend before they even answered the callNewsThe Register — Security
- Iranian Hackers Pose as Recruiters to Deliver Cross-Platform RATs Through Coding TestsNewsThe Hacker News
- Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and InfostealerNewsThe Hacker News
- Multiple Jscrambler Packages Impacted by Supply Chain AttackNewsSecurityWeek
- New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOSNewsThe Hacker News
- Critical SimpleHelp flaw exploited to deploy new stealer malwareNewsBleepingComputer
- 236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet DrainersNewsThe Hacker News
- Crypto Heist Fueled by Elaborate Fake Reputation-Boosting CampaignNewsDark Reading
Source: https://thehackernews.com/2026/08/18-malicious-npm-packages-deliver-cross.html
ID