Halud, is compromising hundreds of NPM packages, spreading self-replicating malware, exfiltrating data, and turning private ...

Threat actors injected malicious code into multiple popular NPM packages after their maintainers fell for a well-crafted ...

Dozens of npm libraries, including a color library with over 2 million downloads a week, have been replaced with novel ...

Security researchers have identified at least 187 npm packages compromised in an ongoing supply chain attack. The coordinated ...

On September 8, 2025, a single phishing email triggered one of npm’s most damaging supply chain attacks, compromising 18 ...

Crypto intelligence platform Security Alliance released a report on Sep. 8 to reveal that Ethereum and Solana wallets have ...

The security team behind the "npm" repository for JavaScript libraries removed two npm packages this Monday for containing malicious code that installed a remote access trojan (RAT) on the computers ...