Security
Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials
The Hacker News·September 22, 2026·1 min read
Cybersecurity researchers disclosed a malicious npm package named 'tw-pkgprobe-7731' that masquerades as a security tool for developers integrating Twilio, while stealthily attempting to harvest sensitive data. The package was first uploaded to the npm registry in mid-August 2026 by an account named 'twdepprobe7731.'
Read at The Hacker NewsDaily crypto arcade
Read the news, then play it.
Chainshorts turns crypto headlines into a daily game. Catch up in 60 words, then jump into daily lucky draws for a shot at the pot.