Malware in @frontend-clients/core

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malware in @frontend-clients/wallet-web

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

Malicious code in @frontend-clients/core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09d9aaa390d29f17fb6be0a0f730c5806ca1179876940237e6319d1378d0fbd3 Any computer that has this package installed or running should be considered...

MAL-2025-5536 Malicious code in @frontend-clients/core (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09d9aaa390d29f17fb6be0a0f730c5806ca1179876940237e6319d1378d0fbd3 Any computer that has this package installed or running should be considered...

What does Zero Trust mean for API security?

The old mentality of building a moat around important assets and trusting anyone or anything that is already inside the castle perimeter has failed us. Attackers have developed many techniques to jump the moat and scale the castle walls to get at what they want. Thus, the new rallying cry is to...