Security news aggregator

Latest cybersecurity reporting from selected sources.

Yasna brings together recent headlines from selected sources and makes them easier to sort with tags, filters, and search.

2 headlines in this view

Refine the feed

Search across headline titles and summaries.

Volume over time

Weekly headline count for the current query.

Showing 2 most recent headlines Filtered view

Cybersecurity researchers have disclosed what they say is an active "Shai-Hulud-like" supply chain worm campaign that has leveraged a cluster of at least 19 malicious npm packages to enable credential harvesting and cryptocurrency key theft

More from The Hacker News 23 Feb 2026, 11:20 p.m. API Artificial Intelligence Credentials Cryptocurrency Disclosure Malicious Code Node.js Research Supply Chain Theft Worm

Several malicious packages have been uncovered across the npm, Python, and Ruby package repositories that drain funds from cryptocurrency wallets, erase entire codebases after installation, and exfiltrate Telegram API tokens, once again demonstrating the variety of supply chain threats lurking in open-source ecosystems

More from The Hacker News 4 Jun 2025, 10:11 p.m. API Artificial Intelligence Cryptocurrency Erase Exposure Node.js Open Source Python Supply Chain