Hackers launched the largest NPM crypto attack in history and compromised 18 JavaScript packages with billions of downloads.

On September 8, 2025, a single phishing email triggered one of npm’s most damaging supply chain attacks, compromising 18 ...

Malware hidden in widely used libraries like chalk and debug hijacked crypto transactions via browser APIs, exposing deep ...

Binance reassures customers after a massive NPM supply chain attack injects malicious code into 18 popular JavaScript ...