Resources

Exploitation of CVE-2025-59287 began after public disclosure and the release of proof-of-concept code

The emerging group demonstrates competent tradecraft using a familiar ransomware playbook and hints of ingenuity

<p>A malicious VS Code extension led to cloned private repositories, reportedly offered for sale on a criminal forum</p> Categories: Threat Research Tags: GitHub, Supply chain