JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...

Upon investigation it is found that Large file download (above 50MB, without "range processing") results in HTTP2_PROTOCOL_ERROR in Chrome. With range processing everything works correctly.

There was an error while loading. Please reload this page.

Aikido Security Ltd. today disclosed what is being described as the largest npm supply chain compromise to date, after ...

NPM developer qix's account compromise potentially puts user funds at risk by compromising library dependencies used by ...

Earlier this week, the Npm package manager suffered what may be its worst security incident to date. Unknown cybercriminals ...

The "biggest supply chain attack" in the history of npm took place recently, affecting almost two dozen packages.