North Korea npm Malware Campaign targets Web3 developers via malicious code on npm, stealing credentials and crypto, exposing ...

Researchers expose Discord webhook C2 in npm, PyPI, RubyGems; North Korean actors published 338 malicious npm packages with ...

Threat actors are abusing legitimate NPM infrastructure in a new phishing campaign that breaks from the typical supply chain attack pattern.

A worm-like campaign named Shai-Hulud has been flagged, targeting widely used packages and propagating itself by harvesting secrets and inserting backdoors. It operates across npm accounts, installing ...

Cybersecurity researchers have flagged a new set of 175 malicious packages on the npm registry that have been used to ...