Technology ❯ Software Development

Package Management

npm NPM Python Dependency Management Node Package Manager Node.js npm Packages Updates Linux Package Management Python Package Index

Shai-Hulud Leak Drives npm Copycats as Mini Variant Compromises AntV Packages

The code leak lowers the barrier for copycats.

Stories older than 24h

TeamPCP Worm Poisons Hundreds of npm and PyPI Packages With Signed Malicious Releases

Malware-Laced Updates Hit SAP-Linked npm Packages, Steal Developer and CI Secrets

Bitwarden CLI npm Release Briefly Backdoored in Supply-Chain Campaign

OpenAI Requires macOS App Updates After Axios Supply-Chain Compromise

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

Axios npm Package Hijacked to Drop RATs as Google Links Attack to UNC1069

LiteLLM Supply-Chain Breach Put Backdoored PyPI Releases in Developers’ Workflows

TeamPCP Poisons Telnyx Python SDK on PyPI With WAV‑Hidden Infostealer

TeamPCP Supply-Chain Attacks Hit First 48-Hour Lull as Focus Turns to Monetization

TeamPCP Backdoors LiteLLM on PyPI, Forcing Emergency Secret Rotations

Researchers Link Iran-Targeted ‘CanisterWorm’ to Trivy Supply-Chain Breach

Trivy Supply-Chain Attack Poisons GitHub Action Tags to Steal CI/CD Secrets

npm Worm 'SANDWORM_MODE' Exposed Targeting Developer and CI Secrets Through Typosquatted Packages

Google Links More State Groups to React2Shell as Wallet-Draining Attacks Spread

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

Microsoft Removes 19 Malicious VS Code Extensions After Supply-Chain Campaign Exposed

Shai-Hulud 2.0 Exposes 400,000 Developer Secrets Across NPM and GitHub

Shai-Hulud npm Worm Exposes 25,000+ GitHub Repos Through Trojanized Packages

Self-Publishing 'IndonesianFoods' Worm Floods npm With More Than 100,000 Spam Packages