THREATNOIR
Subscribe
Back to show
Red vs Blue Show

Malicious Postinstall Hooks Lurk in 700+ Repos

May 23, 2026 · 1:40

Researchers discovered malicious postinstall hooks in over 700 GitHub repositories across Node.js and PHP ecosystems, with attackers downloading hidden bin…

X

Watch next

NetScaler SAML Zero-Day Exploited in the Wild
1:40

NetScaler SAML Zero-Day Exploited in the Wild

Oct 5, 2026

Two NetScaler Zero-Days Exploited in the Wild
1:40

Two NetScaler Zero-Days Exploited in the Wild

Sep 28, 2026

Malicious npm Package Hides Payload in Runtime
1:40

Malicious npm Package Hides Payload in Runtime

Sep 21, 2026

One Click to GrayRabbit Backdoor
1:40

One Click to GrayRabbit Backdoor

Sep 14, 2026

Invisible Unicode Hides Phishing in Plain Sight
1:20

Invisible Unicode Hides Phishing in Plain Sight

Sep 7, 2026

86 Gigs Stolen from Manchester Airports Group
1:20

86 Gigs Stolen from Manchester Airports Group

Aug 31, 2026

ToxicPanda Hijacks VPN to Kill Play Protect
1:20

ToxicPanda Hijacks VPN to Kill Play Protect

Aug 24, 2026

SafePal Breach Puts 40K Crypto Buyers on Sale
1:20

SafePal Breach Puts 40K Crypto Buyers on Sale

Aug 17, 2026

Backdoored TrueConf Installers Spread PhantomCore Malware
1:40

Backdoored TrueConf Installers Spread PhantomCore Malware

Aug 10, 2026