Shai-Hulud is the third major supply chain attack targeting the NPM ecosystem after the s1ngularity attack and the recent ...
Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...
The security team behind the "npm" repository for JavaScript libraries removed two npm packages this Monday for containing malicious code that installed a remote access trojan (RAT) on the computers ...
"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results
Feedback