JavaScript packages with billions of downloads were compromised by an unknown threat actor looking to steal cryptocurrency.

Hackers planted malicious code in open source software packages with more than 2 billion weekly updates in what is likely to ...

The malware was found in 18 npm packages that together are usually downloaded over 2 billion times per week. But the security community was quick to act.

Aikido Security Ltd. today disclosed what is being described as the largest npm supply chain compromise to date, after ...

New Yorkers are on high alert after a warning about a hack that stole over $1 billion from American citizens, leading to a ...

The company said state-backed hacking groups were breaching systems through flaws in SharePoint, which is used by the U.S. government and companies around the world. By Vivian Wang Reporting from ...