Lazarus Group concealed a four-module remote access toolkit inside six fake npm Rollup polyfill packages that fired at import ...
CVE-2026-12957 in Amazon Q is the third MCP auto-execution vulnerability in three AI coding tools. The pattern reveals a ...
Malicious npm packages mimicking Rollup polyfill tooling steal browser data, crypto wallets, and AI tool credentials in a Lazarus-linked campaign.
Explore the latest news and expert commentary on Application Security, brought to you by the editors of Dark Reading ...
Explore the latest news and expert commentary on Vulnerabilities & Threats, brought to you by the editors of Dark Reading ...
Contribute to EsmailLeath/Alemdar development by creating an account on GitHub.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results