Hackers hijacked NPM libraries in a massive supply chain attack, injecting malware that swaps crypto wallet addresses to steal funds.

At least 18 popular JavaScript code packages that are collectively downloaded more than two billion times each week were briefly compromised with malicious software today, after a developer involved ...

Aikido Security Ltd. today disclosed what is being described as the largest npm supply chain compromise to date, after ...

Charles Guillemet, CTO at the crypto wallet platform Ledger, warned the crypto community to be cautious while executing ...

Less $50 worth of crypto has been stolen from the large-scale JavaScript libraries attack on Monday, which targeted Ethereum ...

Crypto intelligence platform Security Alliance released a report on Sep. 8 to reveal that Ethereum and Solana wallets have ...

On September 8, 2025, a single phishing email triggered one of npm’s most damaging supply chain attacks, compromising 18 ...

Hackers are sharing malicious SVG files which spoof real-life websites in order to trick victims into downloading damaging ...

Here's a quick recap of the crypto landscape for Monday (September 8) as of 9:00 p.m. UTC. Get the latest insights on Bitcoin, Ethereum and altcoins, along with a round-up of key cryptocurrency market ...

Discover VSCodium, the community-driven, open-source version of VS Code that prioritizes privacy and freedom. Enjoy the same ...

In a supply chain attack, attackers injected malware into NPM packages with over 2.6 billion weekly downloads after ...

The largest supply-chain compromise in the history of the NPM ecosystem has impacted roughly 10% of all cloud environments, ...