Loading today’s stories

Today

AI-assisted reporting, grounded in a per-article claim ledger. Perspective Coverage and Reality Strip separate source viewpoints from evidence, adoption, hype, incentives, and confidence.

Today

Front Page
Today’s Briefing
Newsletters
Trending
For You
Discover
My Stack
Saved
Off Radar
Search

Sections

Security
Build
Invest
Product
Leadership
Science

Company

About
Mission
How this is made
Evidence Index
The desks
The sources we read
Corrections
Press and brand
The daily edition

Trending now

Confidential Computing
AI Infrastructure Buildout
Prompt Injection Defense
Multi-Agent Coordination
AI capital expenditure
Teen online safety
Open Standards Governance
AI lab unit economics
AI coding tools
Open Source Governance

How this is made

Today For You My Stack Off Radar Search

BRIDGEHEAD — other — Clarity Today

other

BRIDGEHEAD

CloudSEK's codename for the forty-package npm typosquatting campaign that crosses from WSL into Windows to deploy a Rust stealer.

Known aliases

BRIDGEHEAD campaign
BRIDGEHEAD report

Relationships

No evidence-backed relationships are recorded.

Current clusters

security1 distinct publisher

WSL is a working bridge, and npm hygiene stops at the container wall

CloudSEK's BRIDGEHEAD report tracks forty npm typosquats whose install script tests for Windows underneath Linux, then pulls a Rust stealer that reads the host's wallets and cookies.

Publishers:cloudsek.com

Reality

Evidence63
Adoption27
Hype gap+14
Incentives74

Confidence56