Chrome and Firefox Extensions Posing as Free VPNs Add Clipboard Stealers via Malicious Updates 2026-06-29 True Kirill Boychenko True Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages 2026-06-26 True Socket Research Team True Miasma Mini Shai-Hulud Hits LeoPlatform npm Packages and GitHub Actions, Expands to the Go Ecosystem 2026-06-25 True Socket Research Team True Frontier AI Is Now Critical Infrastructure 2026-06-24 True Sarah Gooding True GitHub Actions Checkout Now Blocks Risky pull_request_target Checkouts 2026-06-20 True Sarah Gooding True GlassWASM: WebAssembly Malware Found in Trojanized Open VSX Extensions 2026-06-15 True Joseph Edwards True 152 Chrome Live Wallpaper Extensions Hid Ad Tracking and Faked Google Search Traffic 2026-06-12 True Kush Pandya True npm Tooling Bug Incorrectly Marks One-Character Packages as Security Holders 2026-06-09 True Sarah Gooding True Mini Shai-Hulud, Miasma, and Hades Worms Target Bioinformatics and MCP Developers via Malicious PyPI Wheels 2026-06-08 True Kirill Boychenko True Shai-Hulud Descends to Hades: Miasma Worm Campaign Spreads with New PyPI Wave 2026-06-07 True Socket Research Team True pnpm 11.5 Adds Support for Recognizing npm Staged Publishes 2026-06-04 True Sarah Gooding True Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages 2026-06-01 True Socket Research Team True Famous Chollima Targets PHP Developers Through Compromised Packagist Package 2026-05-31 True Kirill Boychenko True 
