The Hacker News

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

Lighthouse Fails Your Llms.txt Without Markdown Links

A five-character fix turned a failing Lighthouse Agentic Browsing audit into a clean pass. What that reveals about what the audit actually measures.
The Hacker News

ToddyCat-Linked Umbrij Malware Abuses OAuth to Access Gmail via Google API

Kaspersky reports ToddyCat’s Umbrij abuses headless Chromium and OAuth flows to extract Gmail authorization codes, enabling ...

New PamStealer Mac malware poses as a clipboard manager to steal your login info — how to ...

The new PamStealer Mac malware appears to be surprisingly clever while it harvests data and login credentials in the ...
クラウド Watch

メシウス、Excel/PDF対応ドキュメントAPIライブラリの新版「DioDocs V9J ...

メシウス株式会社は1日、ドキュメントを生成・更新する開発支援APIライブラリ「DioDocs」の新バージョン「V9J SP1」を7月15日にリリースすると発表した。 DioDocsは、ExcelやAdobe ...