↓ Skip to main content

Typosquatting & Lookalikes

2026

May 22

IDN Homograph Attacks: More Steps, Same Deception Byte

2025

Mar 19

Typosquatted Go packages deliver malware loaders Byte

2024

Nov 29

Typosquatted npm Packages Inject SSH Backdoor Byte

Jun 16

Can You Trust Your VSCode Extensions? Byte

2023

May 25

Typosquatting in NPM via capitalization Byte

May 25

Google's new .zip TLD makes URLs look like file downloads Byte

2022

Aug 18

241 npm and PyPI packages caught dropping Linux cryptominers Byte

Jul 6

NPM software supply chain attack Byte

Jun 20

PyPI packages steal AWS keys and environment variables Byte

Jun 14

Malicious Dependency in multiple PyPI packages Byte