Huntress research raises concerns, Google paid out $1.6 million for cloud vulnerabilities, California web browser bill.

Dozens of npm libraries, including a color library with over 2 million downloads a week, have been replaced with novel ...

Hackers injected malicious code into nearly a dozen 20 NPM packages with billions of weekly downloads in a software supply chain attack after phishing a maintainer’s account.

Two billion downloads per week. That’s the download totals for the NPM packages compromised in a supply-chain attack this ...

Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...