#npm
#npm

[ follow ]

10 npm Packages Caught Stealing Developer Credentials on Windows, macOS, and Linux

Ten malicious npm packages deliver a multi-stage information stealer using obfuscation, fake CAPTCHA, IP fingerprinting, and a 24MB PyInstaller payload targeting Windows, Linux, and macOS.

Information security

fromArs Technica

3 days ago

NPM flooded with malicious packages downloaded more than 86,000 times

Attackers exploited NPM's Remote Dynamic Dependencies to publish over 100 credential-stealing packages that downloaded unseen malicious code from untrusted servers.

#software-supply-chain

fromThe Hacker News

20 hours ago

Information security

#npm#npm

10 npm Packages Caught Stealing Developer Credentials on Windows, macOS, and Linux

NPM flooded with malicious packages downloaded more than 86,000 times

PhantomRaven Malware Found in 126 npm Packages Stealing GitHub Tokens From Devs

2B Weekly Downloads at Risk: Supply Chain Attack Targets Popular npm Packages, Security Leaders Discuss

20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack

Nx NPM packages poisoned in AI-assisted supply chain attack

PhantomRaven Malware Found in 126 npm Packages Stealing GitHub Tokens From Devs

2B Weekly Downloads at Risk: Supply Chain Attack Targets Popular npm Packages, Security Leaders Discuss

20 Popular npm Packages With 2 Billion Weekly Downloads Compromised in Supply Chain Attack

Nx NPM packages poisoned in AI-assisted supply chain attack

npm hit by PhantomRaven supply chain attack

Massive NPM Supply Chain Attack Hits Crypto Wallets - DataBreaches.Net

Supply chain attack via Nx rages on GitHub

Wave of npm supply chain attacks exposes thousands of enterprise developer credentials

Malicious Nx Packages in 's1ngularity' Attack Leaked 2,349 GitHub, Cloud, and AI Credentials

npm hit by PhantomRaven supply chain attack

Massive NPM Supply Chain Attack Hits Crypto Wallets - DataBreaches.Net

Supply chain attack via Nx rages on GitHub

Wave of npm supply chain attacks exposes thousands of enterprise developer credentials

Malicious Nx Packages in 's1ngularity' Attack Leaked 2,349 GitHub, Cloud, and AI Credentials

NPM Ecosystem Suffers Two AI-Enabled Credential Stealing Supply Chain Attacks

Shai-Hulud Attacks Shake Software Supply Chain Security Confidence - DevOps.com

Self-propagating supply chain attack hits 187 npm packages - DataBreaches.Net

Self-propagating worm fuels latest npm supply chain attack

40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials

The npm incident frightened everyone, but ended up being nothing to fret about

NPM Ecosystem Suffers Two AI-Enabled Credential Stealing Supply Chain Attacks

Shai-Hulud Attacks Shake Software Supply Chain Security Confidence - DevOps.com

Self-propagating supply chain attack hits 187 npm packages - DataBreaches.Net

Self-propagating worm fuels latest npm supply chain attack

40 npm Packages Compromised in Supply Chain Attack Using bundle.js to Steal Credentials

The npm incident frightened everyone, but ended up being nothing to fret about

175 Malicious npm Packages with 26,000 Downloads Used in Credential Phishing Campaign

Supply chain attack compromises npm packages to spread backdoor malware

More popular npm packages hijacked to spread malware

175 Malicious npm Packages with 26,000 Downloads Used in Credential Phishing Campaign

Supply chain attack compromises npm packages to spread backdoor malware

More popular npm packages hijacked to spread malware

15 Recent Node.js Features that Replace Popular npm Packages

Node.js 24 drops MSVC support

15 Recent Node.js Features that Replace Popular npm Packages

Node.js 24 drops MSVC support

GitHub Boosting Security in Response to NPM Supply Chain Attacks

NPM package caught using QR Code to fetch cookie-stealing malware

CrowdStrike Infested With "Self-Replicating Worms"

Supply-chain attacks on open source software are getting out of hand

npm phishing attack laces popular packages with malware

Developers beware: Malware has been found in a dozen popular NPM packages - here's what you need to know

Package lurking in npm for six years waits to destroy your work

NPM package caught using QR Code to fetch cookie-stealing malware

CrowdStrike Infested With "Self-Replicating Worms"

Supply-chain attacks on open source software are getting out of hand

npm phishing attack laces popular packages with malware

Developers beware: Malware has been found in a dozen popular NPM packages - here's what you need to know

Package lurking in npm for six years waits to destroy your work

GitHub to remove weak security options for npm registry

GitHub Mandates 2FA and Short-Lived Tokens to Strengthen npm Supply Chain Security

5 ways to spot software supply chain attacks and stop worms - before it's too late

Learning web development: Native package managers

Learning web development: Installing npm packages and bundling

Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto Developers

npm 'accidentally' removes Stylus package, breaks builds and pipelines

North Korean XORIndex malware hidden in 67 malicious npm packages

Deno 2.3 Now Supports Local NPM Packages

Veracode unravels 12-layer npm attack to find RAT

Malicious npm Package Leverages Unicode Steganography, Google Calendar as C2 Dropper

Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials

Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems

Veracode unravels 12-layer npm attack to find RAT

Malicious npm Package Leverages Unicode Steganography, Google Calendar as C2 Dropper

Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials

Rogue npm Packages Mimic Telegram Bot API to Plant SSH Backdoors on Linux Systems

NPM adds Workspaces for managing multiple packages

Deno boosts dependency management with JSR

Unhandled Runtime Error ChunkLoadError

Malicious npm Package Targets Atomic Wallet, Exodus Users by Swapping Crypto Addresses

#npm
#npm