Trending Now - Kash Patel's Merchandise Site Compromised, Malware Risks Emerge

WHO:

Drudge Report - Kash Patel is associated with the merchandise site that was hacked.

TechCrunch - Users on X reported the hacking incident.

WHAT:

Straight Arrow News - The merchandise site, Based Apparel, sells items such as “K$H”-branded T-shirts for $35, “Government Gangster” playing cards for $10, and a “Fight with K$H” scarf for $25.

Straight Arrow News - The malware discovered is classified as an infostealer, designed to capture login credentials, browser cookies, and information from over 200 cryptocurrency browser extensions.

Straight Arrow News - A payment skimmer was found on the Based Apparel checkout page, intended to steal credit card information.

Drudge Report - The Kash Patel merchandise site was hacked.

TechCrunch - The website was hijacked by hackers to trick visitors into installing malware.

WHERE:

Drudge Report - The hacking incident involved the Kash Patel merchandise site, which is an online platform.

HOW:

Straight Arrow News - The attack was facilitated by a malicious WordPress plugin installed by the attacker, although the method of initial access to Patel's website remains unclear.

TechCrunch - Hackers attempted to trick users into installing malware through the compromised website.

(UPDATED May 22, 2026 23:20 UTC)

A payment skimmer has been discovered on the checkout page of Based Apparel, which is selling items like “K$H”-branded T-shirts and “Government Gangster” playing cards. This skimmer is designed to steal credit card information, and it was enabled by a malicious WordPress plugin installed by the attacker, although how they initially accessed the website is still unclear. Additionally, malware classified as an infostealer has been found, capable of capturing login credentials and information from over 200 cryptocurrency browser extensions.

--

(UPDATED May 22, 2026 21:31 UTC)

The Kash Patel merchandise site has been hacked, with reports indicating that users on X experienced the incident. Hackers hijacked the website, attempting to deceive visitors into installing malware. This online platform is now under scrutiny as the situation unfolds.