Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...

Multiple extensions for Google Chrome and Microsoft Edge delivered a malware framework that deployed modules to steal ...

Attackers abuse Node.js to execute malicious scripts and deploy payloads in attacks targeting governments, technology ...

A malicious installer disguised as the Exodus cryptocurrency wallet is being used to deploy a modular remote-access trojan ...

A new Shai-Hulud supply-chain campaign, tracked as Trinitite, has compromised the npm package ...