NPM developer qix's account compromise potentially puts user funds at risk by compromising library dependencies used by ...

A cryptocurrency thief got into the npm account of a hard-working developer via spearphishing. node.js packages with billions ...

Less $50 worth of crypto has been stolen from the large-scale JavaScript libraries attack on Monday, which targeted Ethereum ...

In a supply chain attack, attackers injected malware into NPM packages with over 2.6 billion weekly downloads after ...

Earlier this week, the Npm package manager suffered what may be its worst security incident to date. Unknown cybercriminals ...

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...

Hackers hijacked NPM libraries in a massive supply chain attack, injecting malware that swaps crypto wallet addresses to steal funds.

Multiple npm packages have been compromised by a phishing attack in an attempt to spread crypto malware to billions of victims.

"debug" package attack failed; malicious update detected early, minimal impact. Developers urged to check their installations ...

Hackers poisoned JavaScript packages with crypto-stealing malware. The large scale attack exposes a DeFi weak point. The ...