-New DPRK TasksJacker hacking campaign
-Proxy[.]am rebrands as ProxyBox
-"Sniffer by Fleras" dominates skimmer market
-GlassWorm returns, again
-New VENOM PhaaS, Storm Stealer, NoVoice Android rootkit, and CrystalX MaaS
-Yurei ransomware leaks tools
-India warns of Android God Mode malware

"PolinRider Confirmed Footprint Grows 6.5x Since March" published by OpenSourceMalware. #SupplyChain, #GitHub, #ContagiousInterview, #PolinRider, #TasksJacker https://opensourcemalware.com/blog/polinrider-blast-radius-grows

"By weaponizing VS Code's tasks.json auto-execution feature, attackers have created a scenario where simply opening a cloned repository in your IDE can compromise your system. No user interaction required beyond a git clone and opening the folder.

opensourcemalware.com/blog/tasksja...

📢 TasksJacker : campagne DPRK compromet 400+ dépôts GitHub via VS Code tasks.json et C2 blockchain
📝 ## 🔍 Contexte

Rapport publié le 2 avril 202…
https://cyberveille.ch/posts/2026-04-02-tasksjacker-campagne-dprk-compromet-400-depots-github-via-vs-code-tasks-json-et-c2-blockchain/ #DPRK #Cyberveille

"How malware abuses npm lifecycle scripts and VS Code tasks" published by OSM. #Axios, #NPM, #TasksJacker, #DPRK, #CTI https://opensourcemalware.com/blog/malware-abuses-vscode-lifecycle-scripts

"TasksJacker: Latest DPRK Attack Skips the Fake Interview and Goes Straight to Compromising GitHub Users" published by OSM. #TasksJacker, #VSCode, #DPRK, #CTI https://opensourcemalware.com/blog/tasksjacker-blog-post