On September 8, 2025, the JavaScript ecosystem experienced what is now considered the largest supply chain attack in npm history. A sophisticated...

In what is being called the largest supply chain attack in history, attackers have injected malware into NPM packages with over 2.6 billion weekly...

In what is being called the largest supply chain attack in history, attackers have injected malware into NPM packages with over 2.6 billion weekly...

The JavaScript ecosystem was rocked in September 2025 by a sweeping npm supply chain attack that compromised over 180 popular packages, including some...

The largest supply-chain compromise in the history of the NPM ecosystem has impacted roughly 10% of all cloud environments, but attackers made little...

The largest supply-chain compromise in the history of the NPM ecosystem has impacted roughly 10% of all cloud environments, but attackers made little...

Hackers have hijacked 18 extremely popular npm packages, downloaded more than 2 billion times every week, injecting them with sophisticated malware...

Security researchers have identified at least 187 npm packages compromised in an ongoing supply chain attack. The coordinated worm-style campaign...

A new supply chain attack has compromised multiple npm packages maintained by the crowdstrike-publisher account, marking a worrying continuation of...

An attack targeting the Node.js ecosystem was just identified — but not before it compromised 18 npm packages that account for billions of weekly...