Security2 dSeptember 18, 2026, 22:19

Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer

A campaign uses SEO-optimized GitHub repositories impersonating LastPass and 39 other companies to deliver the new Rapuncel infostealer. It also installs a Microsoft-signed Alinubx.sys driver that disables 145 antivirus and EDR solutions.

BleepingComputer Open source

Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer

Repos impersonate LastPass Authenticator and 39 other brands
Alinubx.sys driver disables 145 antivirus and EDR products
Archives inflated to 148 MB to bypass antivirus scanners
Stealer targets Discord, Steam, Telegram sessions and wallet data

#LastPass#GitHub#Microsoft

Plugin4Shell: one git trick bypassed safety locks on four AI coding agents

Security

Tetragon in AWS CodeBuild blocks npm postinstall network access

Security

Kaspersky uncovers malware campaign spread via movie torrents

Security

Fake LastPass Authenticator GitHub repos push new Rapuncel infostealer

Plugin4Shell: one git trick bypassed safety locks on four AI coding agents

Tetragon in AWS CodeBuild blocks npm postinstall network access

Kaspersky uncovers malware campaign spread via movie torrents

Z.ai silently uploaded devs' local data: 313MB and 564 upload attempts