A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.

Security experts are advising crypto users to be very careful as a large-scale supply chain exploit could be used to swipe ...

A cryptocurrency thief got into the npm account of a hard-working developer via spearphishing. node.js packages with billions ...

The abuse of Axios was previously flagged by Proofpoint in January 2025, detailing campaigns utilizing HTTP clients to send HTTP requests and receive HTTP responses from web servers to conduct account ...

An attack targeting the Node.js ecosystem was just identified — but not before it compromised 18 npm packages that account ...

Aikido Security Ltd. today disclosed what is being described as the largest npm supply chain compromise to date, after ...

Security researchers have identified at least 187 npm packages compromised in an ongoing supply chain attack. The coordinated ...

The largest supply-chain compromise in the history of the NPM ecosystem has impacted roughly 10% of all cloud environments, ...

Open source software is a pivotal infrastructural component of the modern internet, but its unique security dilemmas can, on ...

Earlier this week, the Npm package manager suffered what may be its worst security incident to date. Unknown cybercriminals ...

Two billion downloads per week. That’s the download totals for the NPM packages compromised in a supply-chain attack this ...

Intrusions bear the same hallmarks as recent Nx mess The npm platform is the target of another supply chain attack, with ...