Malicious npm package mimics an ESLint plugin, embeds an AI-tricking prompt, and steals environment variables via a ...
North Korean hackers intensify their efforts against blockchain and Web3 developers, using nearly 200 malicious npm packages ...
North Korean attackers have delivered more than 197 malicious packages as part of ongoing state-sponsored activity to ...
"As a new and significantly more aggressive wave of npm supply chain malware, Shai-Hulud 2 combines stealthy execution, ...
The originators of the Contagious Interview cyberattack campaign are stitching GitHub, Vercel, and NPM together into a ...
Shai-Hulud malware infiltrates 490 NPM packages, stealing API keys and credentials from ENS and major crypto development environments.
The second Shai-Hulud attack last week exposed around 400,000 raw secrets after infecting hundreds of packages in the NPM ...
A researcher reported that more than 400 NPM libraries, including a cluster of ENS-linked crypto packages, were breached by the Shai Hulud malware.
Regtech firm SlowMist noted that recently, the NPM ecosystem experienced another large-scale package poisoning incident.
A package with 26 million weekly downloads carried a major flaw which has since been addressed.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback