Keep what's yours.
Plain-language guides to stopping password stealers, wallet drainers, fake downloads and remote access scams. Easy enough for anyone, with the details power users want.
What is an infostealer? How to avoid password stealers
An infostealer empties your saved passwords, logins and crypto wallets in seconds. Here is how one gets in, the habits that stop it, and what to do if it ran.
Shai-Hulud worm: am I affected, and how to clean up
The Shai-Hulud worm steals npm, GitHub and cloud tokens and republishes your own packages. Check if you are affected, clean up safely and stop the next wave.
Fake AI app malware: is that AI tool safe to download?
Fake AI app malware hides in fake ChatGPT installers and free AI video generators. Spot the giveaways, get AI apps safely, and know what to do if you ran one.
Roblox account stolen what to do: steps for teens, parents
Roblox account stolen what to do: the first steps, how to reach Roblox Support, and how to lock it down. Plain help for teens and parents.
AI coding assistant security risks: Cursor, Claude, Copilot
AI coding assistant security risks: how poisoned repos, rules files and fake packages turn Cursor, Claude Code or Copilot on you, and how to lock them down.
Apple could not verify app is free of malware open anyway?
Apple could not verify app is free of malware open anyway: when Open Anyway is fine on your Mac, when it is the attack, and what to check first.
How to check if an npm package is safe before you install
How to check if an npm package is safe in 5 minutes: spot typosquats, brand-new versions, install scripts and fake provenance before npm install runs a thing.
Friend sent me a file on Telegram or Discord, is it a virus?
Friend sent me a file on Telegram or Discord, is it a virus? Often a hijacked account. How to check with them and what to do if you opened it.
Fake crypto wallet app: how to spot it and what to do
A fake crypto wallet app comes from a lookalike site, a poisoned installer or a swapped copy of your real wallet. How to check yours and what to do.
Are MCP servers safe? How to vet one before you add it
Are MCP servers safe? Each one is a program running with your permissions. Real malicious MCP cases, tool poisoning, and how to vet a server first.
Test my game scam: why a friend's game link steals accounts
The test my game scam: a friend asks you to try their new game, but their account was stolen first. How to spot it, what to reply, and what to do if you ran it.
Is curl pipe bash safe? How to check before you run it
Is curl pipe bash safe? Only as safe as the page you copied it from and the server it names. How to read, verify and run an install script, and when to skip it.
Fake ads for real apps: how to spot a poisoned download
Fake ads for real apps put a perfect copy of the site at the top of your search, with a stealer inside. Spot the three giveaways and download safely.