Daily Writeups
@Daily_Writeups
3.52K subscribers
2 photos
129K links
Daily Bug Bounty / Cybersecurity Writeups
Source Code : https://github.com/Spix0r/writeup-miner
Download Telegram
About
Blog
Apps
Platform
Join
Daily Writeups
3.52K subscribers
Daily Writeups
⤷ Title: Major npm Supply Chain Attack: Phishing Campaign Steals Maintainer Credentials, Injects Malware into Popular Packages
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Sat, 19 Jul 2025 02:38:23 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #eslint #malware #npm #phishing #Prettier #supply chain attack #synckit #Typosquatting
Daily CyberSecurity
Major npm Supply Chain Attack: Phishing Campaign Steals Maintainer Credentials, Injects Malware into Popular Packages
A sophisticated phishing campaign using a typosquatting domain (npnjs.com) stole an npm maintainer's credentials, injecting malware into popular packages like eslint-config-prettier and synckit.
30 views
Daily Writeups
⤷ Title: npm Supply Chain Attack Exploited in the Wild – Phishing Steals Maintainer Tokens, Injects Malware into Popular Packages
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 21 Jul 2025 23:39:00 +0000
════════════════════════
⌗ Tags: #Cybercriminals #cybersecurity #Eslint #malware #npm #phishing #PoC #Prettier #remote code execution #supply chain attack #Synckit
Penetration Testing Tools
npm Supply Chain Attack Exploited in the Wild – Phishing Steals Maintainer Tokens, Injects Malware into Popular Packages
A phishing campaign stole npm maintainer tokens, leading to trojanized versions of eslint-config-prettier, synckit, and other packages, enabling remote code execution on Windows systems.
8 views
Daily Writeups
⤷ Title: Fake Prettier Extension on VSCode Marketplace Dropped Anivia Stealer
════════════════════════
𐀪 Author: Deeba Ahmed
════════════════════════
ⴵ Time: Mon, 24 Nov 2025 12:43:57 +0000
════════════════════════
⌗ Tags: #Security #Anivia Stealer #Brandjacking #Checkmarx #Coding #Cybersecurity #Fake Prettier Extension on VSCode Marketplace Dropped Anivia Stealer #Marketplace #Prettier #ZeroTrace
Hackread
Fake Prettier Extension on VSCode Marketplace Dropped Anivia Stealer
Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread
80 views
Daily Writeups
⤷ Title: Developer Alert: Fake VS Code Extension Deploys OctoRAT via Multi-Stage Anivia Loader
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 08 Dec 2025 04:08:51 +0000
════════════════════════
⌗ Tags: #Malware #Anivia Loader #Credential Theft #Developer Security #OctoRAT #Prettier_vscode_plus #supply chain attack #VS Code
Penetration Testing Tools
Developer Alert: Fake VS Code Extension Deploys OctoRAT via Multi-Stage Anivia Loader
At the end of November, a team of bug hunters uncovered an infection chain that began with a
9 views
Daily Writeups
⤷ Title: GlassWorm’s macOS Gambit: The Invisible Worm Draining Developer Wallets via Open VSX
════════════════════════
𐀪 Author: ddos
════════════════════════
ⴵ Time: Mon, 05 Jan 2026 03:05:20 +0000
════════════════════════
⌗ Tags: #Malware #Crypto_Stealer #GlassWorm #Koi Security #macOS Security #Open VSX #Prettier Pro #Solana C2 #supply chain attack #Vibe_Coding #VS Code #ZOMBI RAT
Penetration Testing Tools
GlassWorm’s macOS Gambit: The Invisible Worm Draining Developer Wallets via Open VSX
A new wave of malicious extensions has been uncovered in the Open VSX extension marketplace, which is used
22 views