Technology ❯ Software Development ❯ Package Management

NPM

Malicious Packages Dependency Management Security Vulnerabilities Malicious Code @ctrl/tinycolor Token Security Bitwarden CLI SAP Cloud Application Programming ESM and CommonJS

Mini Shai-Hulud Poisons Hundreds of AntV npm Packages in One-Hour Burst

Stolen maintainer credentials let the worm ship install-time stealers that raid developer and CI secrets.

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

Self-Publishing 'IndonesianFoods' Worm Floods npm With More Than 100,000 Spam Packages

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages

Shai-Hulud Worm Infects 187 npm Packages, Steals Secrets and Self‑Replicates via Stolen Tokens

Phished npm Maintainer’s Packages Used in Crypto-Clipping Attack as Rapid Takedown Limits Damage

Malicious npm Packages Tap Ethereum Smart Contracts for Stealthy C2