Technology ❯ Cybersecurity ❯ Malware ❯ Supply Chain Attacks

npm Packages

Shai-Hulud npm Worm Exposes 25,000+ GitHub Repos Through Trojanized Packages

The new variant executes during npm's preinstall stage to harvest developer and CI/CD credentials.

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

Phished npm Maintainer’s Packages Used in Crypto-Clipping Attack as Rapid Takedown Limits Damage