MAL-2026-10765 Malicious code in syft-acp-core (npm)

The syft-acp-core package was published to the npm registry by user 'ada8877' maintainer email [email protected] as part of a dependency-confusion / reconnaissance campaign. The package name mimics the 'syft-acp' internal/private package naming convention an ACP component library of a target...

Bulgarian torrent tracker forum hacked and accused of collecting user IP

A Russian hacker going by name - "kOS" hack into the Bulgarian torrent tracker "Arenabg" website https://forum.arenabg.com/ and leak the complete database of their forum and accused of collecting IP of users like PirateBay. Hacker said, "Why I hack this tracker? Because they store IP information...