Attackers have poisoned a code package on the npm registry in a novel way, hiding credential-stealing malware in steganographic QR codes embedded in a package purporting to offer a JavaScript utility.

Newly discovered npm package 'fezbox' employs QR codes to retrieve cookie-stealing malware from the threat actor's server. The package, masquerading as a utility library, leverages this innovative ...

WGAL NEWS EIGHT. POLICE IN CHAMBERSBURG IN THE FBI WANT YOU TO BE ON ALERT FOR A SCAM INVOLVING UNSOLICITED PACKAGES AND QR CODES. THEY SAY THIS IS A VARIATION OF A BRUSHING SCAM. THE FBI SAYS ...

A new package scam started this summer, and it's likely to gain momentum as people start ordering their iPhone Airs and buying gifts for the holidays. Picture getting a package delivered to your front ...

Malware Injected Into Code Packages That Get 2 Billion+ Downloads Each Week Your email has been sent An attack targeting the Node.js ecosystem was just identified ...

QR codes that were once seen as a convenient shortcut for checking menus or paying bills have increasingly been turned into weapons. Fake delivery texts, counterfeit payment links and malicious codes ...

At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved ...

Scammers are taking the old “brushing scam” and making it more dangerous. Traditionally, brushing scams involved sending you packages you didn’t order so sellers could post fake reviews in your name.

Python developers often need to install and manage third-party libraries. The most reliable way to do this is with pip, Python’s official package manager. To avoid package conflicts and system errors, ...

You have been warned — do not scan here. An “impossible” to detect smartphone threat is now surging, with a new warning that more than 4 million attacks were observed “in the first half of 2025 alone.

QR codes are popping up everywhere, and now they're being used by scammers in a new scheme. The FBI issued an alert about scammers sending packages with malicious QR codes. These codes often appear on ...