All Related Articles for: Malicious NPM Packages Downloaded 86,000+ Times
-
Malicious NPM Packages Use Adspect to Evade Detection
Seven malicious npm packages used the Adspect cloaking service…
Entity similarity: 25% | Topic similarity: 8%Read More » -
Malicious npm Code Infiltrated 10% of Cloud Environments
A supply chain attack using malicious npm packages has…
Entity similarity: 25% | Topic similarity: 8%Read More » -
500 npm Packages Infected by Shai-Hulud Malware Leaking Secrets
Over 500 npm packages, including popular tools like Zapier…
Entity similarity: 25% | Topic similarity: 8%Read More » -
Self-Replicating Worm Infects 180+ npm Packages in Automated Attack
A self-replicating worm named "Shai-hulud" is spreading through the…
Entity similarity: 25% | Topic similarity: 7%Read More » -
Dependency-Track: Open-Source Software Supply Chain Security
Dependency-Track is an open-source platform that provides continuous, real-time…
Entity similarity: 25% | Topic similarity: 8%Read More » -
Google Finds Malware Using AI to Evade Detection
Malicious software is now actively using artificial intelligence to…
Entity similarity: 25% | Topic similarity: 7%Read More » -
NPM Malware Attack Exposed 400,000 Developer Secrets
A malware campaign called Shai-Hulud compromised hundreds of NPM…
Entity similarity: 25% | Topic similarity: 0%Read More » -
Fake npm 2FA Reset Email Used to Hijack Popular Code Packages
A phishing campaign compromised at least 18 widely used…
Entity similarity: 25% | Topic similarity: 0%Read More » -
Critical RCE Flaw Found in Popular expr-eval JavaScript Library
A critical remote code execution vulnerability (CVE-2025-12735) has been…
Entity similarity: 25% | Topic similarity: 0%Read More » -
Self-Propagating Attack Infects 187 npm Packages
A self-propagating worm named 'Shai-Hulud' has compromised at least…
Entity similarity: 25% | Topic similarity: 0%Read More » -
NPM Supply-Chain Attack Thwarted: Hackers Foiled
A massive supply-chain attack on the NPM ecosystem was…
Entity similarity: 25% | Topic similarity: 0%Read More » -
GitHub Flaw: Repositories Can Run Code on Your PC Without Permission
A security flaw in the Cursor extension for Visual…
Entity similarity: 25% | Topic similarity: 0%Read More » -
WordPress Launches AI Agent to Accelerate Development
WordPress has introduce "wp-playground", an AI agent skill that…
Entity similarity: 25% | Topic similarity: 0%Read More » -
Chrome 0-Day Patched, npm Attack, LinkedIn AI Data Scandal
A large majority (89%) of enterprise AI usage is…
Entity similarity: 25% | Topic similarity: 0%Read More » -
Massive Supply-Chain Attack Hits 2B+ Weekly Downloads
A software supply-chain attack compromised nearly two dozen npm…
Entity similarity: 25% | Topic similarity: 0%Read More » -
Malicious dYdX Packages Drain User Wallets
Security researchers discovered a sophisticated supply chain attack targeting…
Entity similarity: 25% | Topic similarity: 0%Read More » -
Critical jsPDF Flaw Exposes Secrets in Generated PDFs
A high-severity vulnerability (CVE-2025-68428) in the widely used jsPDF…
Entity similarity: 25% | Topic similarity: 0%Read More » -
Beware: VSCode Forks Risk “Recommended Extension” Attacks
A security flaw in popular AI-assisted IDEs (like Cursor…
Entity similarity: 25% | Topic similarity: 0%Read More » -
Urban VPN Accused of Secretly Harvesting AI Chat Data
The Urban VPN Proxy browser extension secretly harvested users'…
Entity similarity: 25% | Topic similarity: 0%Read More » -
8 Million Users’ Browser Extensions Harvest AI Chat Data
Several popular browser extensions with millions of installations are…
Entity similarity: 25% | Topic similarity: 0%Read More »