AIThe Hacker Newsabout 3 hours ago
ThreatsDay: Spyware, PLC Attacks, AI Injection
1 min read
An npm package named @copilot-mcp/apex installs a macOS infostealer that harvests browser credentials, crypto wallets, and SSH keys. A fake VS Code extension called Markdown All Pro beacons machine details to an attacker. A GhostCommit technique steals repository secrets by hiding instructions inside a PNG image processed by an LLM reviewer.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGoogle
Summary by ByteBrief
