NPM 20
- Don't Revoke That Token Yet Inside the keyv/cacheable npm Worm
- Massive ChainDrop npm Supply-Chain Attack Infects Hundreds of Packages
- GitHub Ends Automatic Install Script Execution for npm
- Mini Shai-Hulud Campaign Compromises Red Hat Cloud Services
- npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks
- npm Malware, Fake Devs, and Deepfake Videos These Are A Few of My Favorite DPRK Things
- npm Malware, Fake Devs, and Deepfake Videos - A Few of My Favorite DPRK Things
- Hackers Hide Pulsar RAT Inside PNG Images in New NPM Supply Chain Attack
- Dead Man’s Switch – Widespread npm Supply Chain Attack Driving Malware Attacks
- FAQ About Sha1-Hulud 2.0 The "Second Coming" of the npm Supply-Chain Campaign
- Threat Actors Leverage npm Ecosystem to Deliver AdaptixC2 Post-Exploitation Framework
- 40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials
- Malicious npm Code Reached 10% of Cloud Environments
- Someone's poking the bear with infostealers targeting Russian crypto developers
- AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before Takedown
- Surveillance Malware Hidden in npm and PyPI Packages Targets Developers with Keyloggers, Webcam Capture, and Credential Theft
- Tracking Protestware Spread 28 npm Packages Affected by Payload Targeting Russian-Language Users
- Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
- Another Wave North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages
- Backdoors in Python and NPM Packages Target Windows and Linux