An elevation of privilege vulnerability in the Windows NTLM authentication protocol and a flaw in Office’s Preview Pain are ...

Qix is an open source maintainer account that was compromised by a phishing attack. This allowed attackers to infect 18 popular npm packages with malicious code. Together, these packages are ...

SwissBorg $41M hack, hidden malicious npm code, sanctions on Southeast Asian networks, California launderer's sentencing, ...

Data from Arkham Intelligence shows that the authors of the NPM supply chain attack, designed to steal crypto assets by ...

An attack targeting the Node.js ecosystem was just identified — but not before it compromised 18 npm packages that account ...

Billions (No, that's not a typo, Billions with a capital B) of files were potentially compromised. If you thought Node Package Manager (npm), the Billions of downloads were potentially compromised ...

A major JavaScript supply chain attack targeting crypto wallets through compromised GitHub packages has stolen only $1,043.

Earlier this week, the Npm package manager suffered what may be its worst security incident to date. Unknown cybercriminals ...

Charles Guillemet says a phishing-led supply-chain breach could have become a systemic disaster for crypto users.

The largest supply-chain compromise in the history of the NPM ecosystem has impacted roughly 10% of all cloud environments, ...

Threat actors injected malicious code into multiple popular NPM packages after their maintainers fell for a well-crafted ...

Security experts have warned that a newly discovered supply chain attack targeting npm packages is still active and may ...