Technology ❯ Software Development ❯ Package Management

Node Package Manager

JavaScript Ecosystem npm Packages Malicious Dependencies npm Credential Theft Malicious Packages npm Registry npm Ecosystem

6 ARTICLES

3mo ago

Amazon Links Four npm Supply‑Chain Hacks to North Korea‑Linked Actor

The company says the campaign used maintainer social engineering and evolving multi‑stage tradecraft that can push malicious updates broadly, prompting registry changes and new industry funding.

10 ARTICLES

5mo ago

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

12 ARTICLES

7mo ago

Axios npm Package Briefly Trojanized After Maintainer Account Takeover