Npm

Tensorlake npm Package Hijacked to Spread Shai-Hulud Worm

Tensorlake npm Package Hijacked to Spread Shai-Hulud Worm

Oct 8, 2026 · 2 min read

Fake Twilio Bug-Bounty npm Package Steals Developer Credentials

Fake Twilio Bug-Bounty npm Package Steals Developer Credentials

Sep 23, 2026 · 1 min read

npm Malware Hides in Runtime to Bypass npm v12 Security Controls

npm Malware Hides in Runtime to Bypass npm v12 Security Controls

Sep 20, 2026 · 1 min read

LLM-Built PhantomRaven Stealer Targets Developer Credentials via npm

LLM-Built PhantomRaven Stealer Targets Developer Credentials via npm

Sep 19, 2026 · 1 min read

WeaselBiscuit Malware in 13 npm Packages Targets Chrome Extensions

WeaselBiscuit Malware in 13 npm Packages Targets Chrome Extensions

Sep 18, 2026 · 1 min read

Hackers Turn npm Into Free Phishing Host via Mirror Abuse

Hackers Turn npm Into Free Phishing Host via Mirror Abuse

Aug 26, 2026 · 1 min read

14 Trojanized npm Packages Hide AI-Powered Linux Backdoor

14 Trojanized npm Packages Hide AI-Powered Linux Backdoor

Aug 22, 2026 · 1 min read

800 Malicious npm Packages Drop Cross-Platform RAT and Infostealer

800 Malicious npm Packages Drop Cross-Platform RAT and Infostealer

Aug 7, 2026 · 1 min read

ChainDrop npm Worm Hits 1,300 Packages and 2 Billion Monthly Downloads

ChainDrop npm Worm Hits 1,300 Packages and 2 Billion Monthly Downloads

Aug 4, 2026 · 1 min read

18 Malicious npm Packages Target Alibaba Developers With RAT Malware

18 Malicious npm Packages Target Alibaba Developers With RAT Malware

Aug 4, 2026 · 1 min read

North Korea Hijacked debug and chalk npm Packages

North Korea Hijacked debug and chalk npm Packages

Jul 31, 2026 · 1 min read

Compromised joyfill npm Packages Install RAT on Import

Compromised joyfill npm Packages Install RAT on Import

Jul 29, 2026 · 1 min read

jscrambler npm Package Poisoned to Steal Developer Credentials

jscrambler npm Package Poisoned to Steal Developer Credentials

Jul 12, 2026 · 1 min read

Miasma Worm Infected 73 Microsoft Code Repositories

Miasma Worm Infected 73 Microsoft Code Repositories

Jun 7, 2026 · 1 min read

When Valid Attestations Aren't Enough: TanStack, OpenAI's Laptops, and the Case for Structural Pre-Flight Checks

When Valid Attestations Aren't Enough: TanStack, OpenAI's Laptops, and the Case for Structural Pre-Flight Checks

May 18, 2026 · 12 min read

macOS Users: Update OpenAI Apps After Supply Chain Attack

macOS Users: Update OpenAI Apps After Supply Chain Attack

May 17, 2026 · 1 min read

The Claude Code Source Leak: What Happened, What Was Exposed, and What It Means for You

The Claude Code Source Leak: What Happened, What Was Exposed, and What It Means for You

Apr 7, 2026 · 12 min read

1 2