A major supply chain attack on the NPM repository briefly threatened crypto users worldwide. Malicious code was pushed into ...

On September 8, 2025, a single phishing email triggered one of npm’s most damaging supply chain attacks, compromising 18 ...

During the two-hour window on Monday in which hijacked npm versions were available for download, malware-laced packages ...

A phishing campaign leveraging the Salty2FA kit has been uncovered by cybersecurity researchers, revealing advanced ...

Hackers launched the largest NPM crypto attack in history and compromised 18 JavaScript packages with billions of downloads.