securityaffairs.com 8/9/2026, 1:31:00 PM · external

Malware surge hits dev tools: npm, Roblox, ScreenConnect

Malware surge hits dev tools: npm, Roblox, ScreenConnect
Developing story malware 2 articles tracked
Fake Roblox cheat distributes Java stealer Powercat to steal accounts
CyberSIXT Evidence Panel
Primary Source bitdefender.com

THE Security Affairs Malware Newsletter Round 109, authored by Pierluigi Paganini, presents a compilation of significant articles and research related to malware trends worldwide. Key topics include:

1. Malicious Roblox cheat tools distributing Java stealers via Discord.

2. Insights into DarkSword’s extensive panel operations affecting multiple codebases.

3. An npm package cluster delivering cross-platform remote access trojans targeting Alibaba developers.

4. Analysis on ScreenConnect remote monitoring software misuse and trusted software exploitation.

5. A look into the latest version of the XCSSET malware affecting Xcode developers.

6. The emergence of a new ClickFix loader delivering various RATs.

7. A campaign publishing over 700 malicious npm packages, linked to Russian AI.

8. Analysis of a macOS malware draining cryptocurrency.

9. Studies on malware detection techniques utilizing machine and deep learning.

10. Articles discussing ransomware risk assessments and behavioral scores for early malware detection.

View Primary Source Via securityaffairs.com

Article by CyberSIXT

Timeline Coverage

Swipe to explore timeline