[rat]

August 8, 2026

• Nearly 800 malicious npm packages are delivering a cross-platform RAT and infostealer. The Hacker News · Threat Activity

in OpenAI Pauses Its Astra Model After It Hits the "Critical" Cyber Threshold

July 5, 2026

• ChocoPoC RAT spreads via trojanized GitHub PoC repos, targeting researchers testing exploits. The malicious code isn't in the exploit itself — the repos pull poisoned Python packages from PyPI that later fetch the RAT, which can run commands and steal browser data, files, and shell history. BleepingComputer · Threat Activity

in Confidential Computing's Root of Trust May Be Unfixable