I released a Mahjong score calculator app in 20 hours using Claude Code. 5 mechanisms I prepared before leaving it to AI

When I had Claude Code build a Mahjong score calculator app, it took about 20 hours from the first commit to the release on a ...
Hackread

Placeholder Domains Used by 349 AI Agent Skills Found Redirecting to Scams

Manifold Security found placeholder domains cited in 359,000 GitHub files and 349 AI agent skills serving cloaked scam ...
Berita Oto Tekno - Harianjogja.com

Waspada Lowongan Kerja Palsu di LinkedIn, Ada RAT NodeRabbit dan PollCat

Kaspersky mengungkap kampanye Mirage Kitten yang menyebarkan RAT NodeRabbit dan PollCat melalui tes coding palsu di LinkedIn.
SC Media

New Exvicy malware-as-a-service framework copies rival’s code

Exvicy operates as a ClickFix framework, distributing malware through compromised WordPress websites, according to Sekoia's ...
The Hacker News

Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal

Malicious npm package indexed-btree hid its loader in runtime code, avoiding install hooks after logging millions of downloads.
xenospectrum

North Korea's WaterPlum Fake-Hiring Attacks Likely Infected 30,000+ PCs, Japan and Allies Say

Japan, the US, Australia and Germany have disclosed WaterPlum's fake-recruitment attacks. We break down the 30,000-device ...
Infosecurity Magazine

New Exvicy ClickFix Framework Built on Rival ErrTraffic's Code

A new ClickFix malware-as-a-service (MaaS) framework called Exvicy has been built on code lifted from a rival service, ErrTraffic.
InfoWorld

New npm malware finds a way around install script defenses

A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.
cyberpress

npm Supply Chain Attack Hides Malware Inside Normal Package Code to Evade Detection

A new npm supply chain campaign is hiding malware inside ordinary JavaScript package code instead of using the usual ...
CryptoTicker.io

North Korean Hackers Drain 7,000 Crypto Wallets: What to Check on Job Offers and Coding Tests

FBI, BND and Japan's NPA name WaterPlum: 30,000 infected machines, 7,000 drained wallets. Spot the fake job offer and protect your seed phrase.
techtimes

Malicious JavaScript Evaded VirusTotal in Seven of Eight E-Commerce Storefront Attacks

Worker move goods for despatch in a redistribution centre of US online retail giant Amazon in Horn-Bad Meinberg, western Germany, on December 9, 2024. INA FASSBENDER/AFP via Getty Images Cloudflare's ...