JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

An attack targeting the Node.js ecosystem was just identified — but not before it compromised 18 npm packages that account ...

A cryptocurrency thief got into the npm account of a hard-working developer via spearphishing. node.js packages with billions ...

Aikido Security Ltd. today disclosed what is being described as the largest npm supply chain compromise to date, after ...

Less $50 worth of crypto has been stolen from the large-scale JavaScript libraries attack on Monday, which targeted Ethereum ...

According to Guillemet, the malicious code — already pushed into packages with over 1 billion downloads — is designed to ...

A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.

Binance reassures customers after a massive NPM supply chain attack injects malicious code into 18 popular JavaScript ...

Hackers hijacked NPM libraries in a massive supply chain attack, injecting malware that swaps crypto wallet addresses to steal funds.

A major supply chain attack on the NPM repository briefly threatened crypto users worldwide. Malicious code was pushed into ...

A new digital supply chain attack has targeted popular open-source npm packages with at least two billion downloads per week. On Sept. 8, Josh Junon, a package maintainer whose account was at the ...

The successful phishing attack on Junon resulted in at least 18 very popular npm packages being compromised, with around 2.7 ...