Technology ❯ Software Development ❯ Package Management

npm

Malicious Packages Security Vulnerabilities Vulnerabilities Dependency Management Malicious Code Injection Security Improvements npm Tokens React Packages Fake Packages CLI Tools Security Risks Trojanized Packages Credential Theft Authentication Security Issues

Microsoft Removes 19 Malicious VS Code Extensions After Supply-Chain Campaign Exposed

Researchers say attackers hid payloads by tampering with trusted npm packages embedded in extensions’ bundled dependencies.

Shai-Hulud 2.0 Exposes 400,000 Developer Secrets Across NPM and GitHub

Shai-Hulud npm Worm Exposes 25,000+ GitHub Repos Through Trojanized Packages

Self-Publishing 'IndonesianFoods' Worm Floods npm With More Than 100,000 Spam Packages

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages

GitHub Details Staged Overhaul of npm Publishing Security

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

Phished npm Maintainer’s Packages Used in Crypto-Clipping Attack as Rapid Takedown Limits Damage

Malicious npm Packages Tap Ethereum Smart Contracts for Stealthy C2

PyPI Battles Live Phishing Campaign Exploiting Typosquatted Domain