Security researchers found hundreds of malicious add-ons on ClawHub.
Active React2Shell exploitation uses malicious NGINX configurations to hijack web traffic, targeting Baota panels, Asian TLDs, and government domains.
A Chrome extension posing as an Amazon ad blocker was caught hijacking affiliate links in the background, redirecting ...
A new GlassWorm malware attack through compromised OpenVSX extensions focuses on stealing passwords, crypto-wallet data, and developer credentials and configurations from macOS systems.