IntroductionOn May 14, 2026, the Zscaler ThreatLabz team identified unusually high activity associated with the threat actor SmartApeSG to deploy malware. During our examination, we discovered ...

The popular repository npm's security guidance is clear: audit preinstall and postinstall scripts before installing packages. The attacker behind this campaign read the same guidance — and found a way ...

npm install └─ preinstall: node index.js (stage 1, 4.1 MB Caesar wrapper) └─ decoded JS, ~1.2 MB (stage 2, AES-128-GCM unwrap) ├─ payload _b, 898 B (stage ...

Cybersecurity researchers have uncovered a sophisticated malware campaign that leveraged an advanced JavaScript obfuscation technique to compromise hundreds of legitimate websites and redirect ...

A malicious npm package called “solders” uses more than half a dozen layers of obfuscation in a convoluted, multistage attack to spread Pulsar RAT, Veracode researchers reported Monday. The attack ...

A sophisticated Magecart attack campaign has been discovered targeting e-commerce platforms, employing heavily obfuscated JavaScript code to harvest sensitive payment information. This latest variant ...

Unicode codepoint truncation - also called a Unicode overflow attack - happens when a server tries to store a Unicode character in a single byte. Because the maximum value of a byte is 255, an ...

Imagine you want to send a secret message to a friend, but the channel you want to use is compromised and monitored. You could use some encryption, but that would arouse the suspicion of the people ...