HK
Heykuki News
Top
New
Best
Ask
Show
Jobs
Toggle theme
Top
New
Best
Ask
Show
Jobs
Request
1.
▲
8M users' AI conversations sold for profit by "privacy" extensions
koi.ai
246 comments
6 months ago
takira
832 points
2.
▲
Lotusbail npm package found to be harvesting WhatsApp messages and contacts
koi.ai
211 comments
6 months ago
sohkamyung
323 points
3.
▲
4.3M Browsers Infected: Inside ShadyPanda's 7-Year Malware Campaign
koi.ai
26 comments
7 months ago
janpio
100 points
4.
▲
MaliciousCorgi: AI Extensions send your code to China
koi.ai
89 comments
5 months ago
tatersolid
91 points
5.
▲
First Self-Propagating Worm Using Invisible Code Hits OpenVSX and VS Code
koi.ai
59 comments
8 months ago
dnslavin
88 points
6.
▲
PhantomRaven: NPM Malware Hidden in Invisible Dependencies
koi.ai
1 comment
8 months ago
azornathogron
12 points
7.
▲
DarkSpectre: 8.8M users infected via malicious browser extensions over 7 years
koi.ai
1 comment
6 months ago
dnslavin
4 points
8.
▲
SHA1-Hulud – The Second Coming: Over 1k NPM Packages Compromised
koi.ai
1 comment
7 months ago
amitassaraf
4 points
9.
▲
ClawHavoc: Malicious Clawed Skills Found by the Bot They Were Targeting
koi.ai
discuss
5 months ago
Santas
4 points
10.
▲
GlassWorm, Self-Propagating Worm Using Invisible Code Hits OpenVSX and VSCode
koi.ai
4 comments
8 months ago
chha
3 points
11.
▲
PackageGate: Zero-Days in JavaScript Package Managers but NPM Won't Act
koi.ai
discuss
5 months ago
deanc
3 points
12.
▲
We Prevented Cursor, Windsurf and Google Antigravity from Recommending Malware
koi.ai
discuss
6 months ago
_____k
3 points
13.
▲
PhantomRaven: NPM Malware Hidden in Invisible Dependencies
koi.ai
1 comment
8 months ago
beardyw
2 points
14.
▲
GlassWorm: Self-propagating Worm Using Invisible Code Hits OpenVSX Marketplace
koi.ai
1 comment
8 months ago
samuell
2 points
15.
▲
GlassWorm Goes Native: Same Infrastructure, Hardened Delivery
koi.ai
discuss
6 months ago
mooreds
1 points