Live Updates: Shai-Hulud, the Most Dangerous NPM Breach in History(koi.security)

25 points by chha 1 year ago | 1 comments

MaliciousCorgi: AI Extensions send your code to China(koi.ai)

75 points by tatersolid 8 months ago | 63 comments

4.3M Browsers Infected: Inside ShadyPanda's 7-Year Malware Campaign(koi.ai)

71 points by janpio 10 months ago | 15 comments

8M users' AI conversations sold for profit by "privacy" extensions(koi.ai)

706 points by takira 10 months ago | 225 comments

Koi Security research post reporting that privacy/VPN browser extensions such as Urban VPN, with 8 million users, collected and sold users' AI chatbot conversations.

First Self-Propagating Worm Using Invisible Code Hits OpenVSX and VS Code(koi.ai)

47 points by dnslavin 1 year ago | 34 comments

Lotusbail npm package found to be harvesting WhatsApp messages and contacts(koi.ai)

291 points by sohkamyung 10 months ago | 183 comments