Come for the coding test, stay for the C2 traffic Next.js developers are once again in the crosshairs as hackers seed ...
PromptSpy, discovered by ESET, is the first known Android malware to integrate generative AI into its execution flow.
A developer-targeting campaign leveraged malicious Next.js repositories to trigger a covert RCE-to-C2 chain through standard ...
Researchers warn malicious packages can harvest secrets, weaponize CI systems, and spread across projects while carrying a dormant wipe mechanism.