SIEMCyberSecurity

SIEM Cybersecurity

[supplychainattack @spchainattack]

https://t.co/WoM4ByY5NF

[supplychainattack @spchainattack]

🚨 [New supply chain attack declared]: free-claude

free-claude is an npm package baiting developers with a "free Claude" AI access lure, part of a cluster of fake AI-tool packages (alongside free-anthropic-claude) now flagged on npm.

Malware was found in it (GHSA-7qpf-5pm7-57rh). Any system with it installed or running is fully compromised, with full control possibly handed to an outside entity.

→ Rotate all secrets from a clean machine, remove the package, then audit/reimage

Full details 👇 https://t.co/nYXmRft2me
#supplychain #SupplyChainSecurity #infosec #CyberSecurity #npm #freeclaude #AISecurity #malware #DevSecOps #ThreatIntel #OpenSource

[supplychainattack @spchainattack]

🚨 [15 malicious JetBrains plugins (70,000 developers hit)]

Over an 8-month campaign, 15 fake AI coding-assistant plugins on the official JetBrains Marketplace stole OpenAI, DeepSeek, and SiliconFlow API keys from ~70,000 developers, exfiltrating to a Beijing C2 that's still live.

→ Revoke all OpenAI/DeepSeek/SiliconFlow keys, audit and remove unknown JetBrains plugins, enable MFA, enforce plugin allowlisting

Full details 👇 https://t.co/kUqyhJ8kFn
#supplychain #SupplyChainSecurity #infosec #CyberSecurity #JetBrains #AISecurity #malware #DevSecOps #APIsecurity #ThreatIntel #OpenSource

[SIEMCyberSecurity @siemcybersec]

We’ve been expecting this at Salary Run for months.
Cloudflare’s story is just the beginning and what’s coming next may surprise a lot of people.
Read the full analysis 👇
https://t.co/SxKgJuEXsX

[SIEMCyberSecurity @siemcybersec]

@salary_run_ Do you need Datascientist profile?

[Salary.run @salary_run_]

Me, every single time with Claude Code be fore having the thing that I wanted hahahahah !!

#claude #claude_code #code

[SIEMCyberSecurity @siemcybersec]

@salary_run_ Hahaha they still need to work

[SIEMCyberSecurity @siemcybersec]

@salary_run_ Nice job a really needed solution!!

[Salary.run @salary_run_]

https://t.co/8NdQ7E1niX gives you access to thousands of real, anonymous salaries from companies worldwide. Use MyWorth AI to estimate YOUR salary in seconds. Available in 4 languages. Visit https://t.co/kOSOiPIG94 or DM us at [email protected]

#MyWorth #SalaryCheck #Salary

[SIEMCyberSecurity @siemcybersec]

Ransomware attack: lessons to learn and best practices https://t.co/5OOP4VO0Es