npm 42
- OpenAPI React Query Codegen Compromised in Mini Shai-Hulud npm Supply Chain Attack
- Miasma Mini Shai-Hulud Hits ImmobiliareLabs npm Packages
- Miasma Mini Shai-Hulud Hits LeoPlatform npm Packages and GitHub Actions, Expands to the Go Ecosystem
- Mini Shai-Hulud Campaign Hits Red Hat Cloud Services npm Packages
- Mini Shai-Hulud Hits @antv Ecosystem, 639 Compromised npm Package Versions
- Mini Shai-Hulud Spreads to Packagist: Malicious Intercom PHP Package Follows npm Compromise
- Malicious Checkmarx Artifacts Found in Official KICS Docker Repository and Code Extensions
- Namastex.ai npm Packages Hit with TeamPCP-Style CanisterWorm Malware
- North Korea's Contagious Interview Campaign Spreads Across 5 Ecosystems, Delivering Staged RAT Payloads
- CanisterWorm: npm Publisher Compromise Deploys Backdoor Across 29+ Packages
- SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains
- Spearphishing Campaign Abuses npm Registry to Target U.S. and Allied Manufacturing and Healthcare Organizations
- Inside the GitHub Infrastructure Powering North Korea's Contagious Interview npm Attacks
- Shai Hulud Strikes Again (v2)
- North Korea's Contagious Interview Campaign Escalates: 338 Malicious npm Packages, 50,000 Downloads
- Popular Tinycolor npm Package Compromised in Supply Chain Attack Affecting 40+ Packages
- Wallet-Draining npm Package Impersonates Nodemailer to Hijack Crypto Transactions
- Surveillance Malware Hidden in npm and PyPI Packages Targets Developers with Keyloggers, Webcam Capture, and Credential Theft
- npm 'is' Package Hijacked in Expanding Supply Chain Attack
- Contagious Interview Campaign Escalates With 67 Malicious npm Packages and New Malware Loader
- Another Wave: North Korean Contagious Interview Campaign Drops 35 New Malicious npm Packages
- 2025 Blockchain and Cryptocurrency Threat Report: Malware in the Open Source Supply Chain
- 60 Malicious npm Packages Leak Network and Host Data in Active Malware Campaign
- Malicious Koishi Chatbot Plugin Exfiltrates Messages Triggered by 8-Character Hex Strings
- The Landscape of Malicious Open Source Packages: 2025 Mid‑Year Threat Report
- Backdooring the IDE: Malicious npm Packages Hijack Cursor Editor on macOS
- The Bad Seeds: Malicious npm and PyPI Packages Pose as Developer Tools to Steal Wallet Credentials
- Lazarus Expands Malicious npm Campaign: 11 New Packages Add Malware Loaders and Bitbucket Payloads
- Black Basta's Dependency Confusion Ambitions and Ransomware in Open Source Ecosystems
- Lazarus Strikes npm Again with New Wave of Malicious Packages
- North Korean APT Lazarus Targets Developers with Malicious npm Package
- Gmail For Exfiltration: Malicious npm Packages Target Solana Private Keys and Drain Victims' Wallets
- Weaponizing OAST: How Malicious Packages Exploit npm, PyPI, and RubyGems for Data Exfiltration and Recon
- Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
- Skuld Infostealer Returns to npm with Fake Windows Utilities and Malicious Solara Development Packages
- Typosquatting Cryptographic Libraries: Malicious npm Packages Threaten Crypto Developers with Keylogging and Wallet Theft
- Malicious npm Packages Inject SSH Backdoors via Typosquatted Libraries
- Threat Actor Exposes Playbook for Exploiting npm to Build Blockchain-Powered Botnets
- Roblox Developers Targeted with npm Packages Infected with Skuld Infostealer and Blank Grabber
- Massive npm Malware Campaign Leverages Ethereum Smart Contracts To Evade Detection and Maintain Control
- Author Typosquatting on npm: Attackers Impersonate Sindre Sorhus with Malicious 'chalk-node' Package
- Noxia: Emerging Dark Web Hosting Provider Targets Python, Node.js, Go, and Rust Ecosystems