PCAPGraph is an open-source network investigation and threat hunting tool that transforms packet cap...
RedSide Security has open-sourced NETMAPPER, a network discovery and visualization tool designed to ...
When an incident unfolds and all you have left are Windows event logs, understanding attacker moveme...
RedSide Security October 17, 2026 Cybersecurity 14 views
A malicious npm package named imgdecode, linked to the MALFEX supply chain campaign, hides a shellcode loader inside a Windows native addon—showing how attackers are moving payloads into compiled code that traditional scanners struggle to inspect.
Continue reading: MALFEX Malicious npm Package 'imgdecode' Hides She…
RedSide Security October 08, 2026 Cyber Attacks 52 views
The npm package 'tensorlake' was compromised with the Shai-Hulud credential-stealing worm, allowing attackers to harvest secrets, establish persistence, and execute remote code on developer machines.
Continue reading: Tensorlake npm Package Compromised: Shai-Hulud Wor…
RedSide Security October 08, 2026 Cyber Attacks 120 views
Researchers uncover a long-running npm supply chain campaign that has delivered Overlord RAT and a credential stealer through eight packages downloaded over 40,000 times since 2023.
Continue reading: Eight Malicious npm Packages Deliver Overlord RAT …
RedSide Security May 20, 2026 Data Leaks & Breaches 251 views
GitHub is investigating unauthorized access to its internal repositories following a supply chain attack linked to the threat actor **TeamPCP**, who reportedly listed GitHub source code and internal data for sale on a cybercrime forum. The incident is part of an ongoing malware campaign targeting open-source ecosystems, including a compromised Microsoft Python package and a self-replicating infostealer known as Mini Shai-Hulud.
RedSide Security May 14, 2026 Cybersecurity 210 views
Cybercrime groups **TeamPCP** and **BreachForums** are reportedly running a coordinated contest offering a $1,000 Monero prize for supply chain attacks targeting open-source ecosystems. The competition incentivizes participants to compromise software packages and CI/CD pipelines using a malicious tool called “Shai-Hulud,” raising serious concerns about large-scale, crowdsourced software supply chain compromise.