News

JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.
Join us for this timely and informative virtual summit, where our panel of experts will cut through the noise and dive into what’s new, what’s coming, and how you can prepare to harness Copilot’s full ...
Hackers launched the largest NPM crypto attack in history and compromised 18 JavaScript packages with billions of downloads.
A major supply chain attack on the NPM repository briefly threatened crypto users worldwide. Malicious code was pushed into ...
Hackers poisoned JavaScript packages with crypto-stealing malware. The large scale attack exposes a DeFi weak point. The ...
On September 8, 2025, a single phishing email triggered one of npm’s most damaging supply chain attacks, compromising 18 ...
Warning from Charles Guillemet, CTO of Ledger, urged certain users to halt onchain transactions due to a potentially ...
An escalating npm supply chain attack has compromised dozens of foundational JavaScript packages to spread malware and drain ...
Binance reassures customers after a massive NPM supply chain attack injects malicious code into 18 popular JavaScript ...
Hackers are sharing malicious SVG files which spoof real-life websites in order to trick victims into downloading damaging ...
Vibe coding is more than just a productivity trend or AI-assisted development; it's a transformative approach to coding.
"debug" package attack failed; malicious update detected early, minimal impact. Developers urged to check their installations ...