All Related Articles for: Popular NPM 'is' Package Infects 2.8M Weekly Users with Malware
-
Microsoft Blames North Korea for Mastra AI Supply Chain Attack
North Korean state-sponsored group Sapphire Sleet (also known as…
Read More » -
Red Hat npm packages hit by new Mini Shai-Hulud malware wave
On June 1, 2026, over 30 npm packages tied…
Read More » -
Red Hat NPM channel hit by backdoored packages
A supply-chain attack breached official Red Hat NPM accounts…
Read More » -
Marimo RCE flaw exploited in active attacks
A critical vulnerability (CVE-2026-39987) in the Marimo Python notebook…
Read More » -
Adobe Acrobat Reader Zero-Day Exploited Since Last Year
A critical, actively exploited zero-day vulnerability in Adobe Acrobat…
Read More » -
Software Supply Chain Attacks Cause Data Breaches
A series of software supply chain attacks on popular…
Read More » -
Invisible Code Supply-Chain Attack Hits GitHub Repositories
A new wave of supply-chain attacks uses invisible Unicode…
Read More » -
New npm Malware Spreads Itself in Supply Chain Attack
A sophisticated malware campaign is targeting developers via 19…
Read More » -
Malicious dYdX Packages Drain User Wallets
Security researchers discovered a sophisticated supply chain attack targeting…
Read More » -
Critical jsPDF Flaw Exposes Secrets in Generated PDFs
A high-severity vulnerability (CVE-2025-68428) in the widely used jsPDF…
Read More » -
Top Open Source Projects to Watch in 2026
The open source landscape is being transformed by projects…
Read More » -
Secure SDLC: A Manufacturer’s Critical Defense
The Jaguar Land Rover cyberattack was a catastrophic manufacturing…
Read More » -
Critical React & Node.js Flaw Patched: Update Now (CVE-2025-55182)
A critical remote code execution vulnerability (CVE-2025-55182) affects React…
Read More » -
500 npm Packages Infected by Shai-Hulud Malware Leaking Secrets
Over 500 npm packages, including popular tools like Zapier…
Read More » -
Critical RCE Flaw Found in Popular expr-eval JavaScript Library
A critical remote code execution vulnerability (CVE-2025-12735) has been…
Read More » -
Self-Propagating Attack Infects 187 npm Packages
A self-propagating worm named 'Shai-Hulud' has compromised at least…
Read More » -
Self-Replicating Worm Infects 180+ npm Packages in Automated Attack
A self-replicating worm named "Shai-hulud" is spreading through the…
Read More » -
NPM Supply-Chain Attack Thwarted: Hackers Foiled
A massive supply-chain attack on the NPM ecosystem was…
Read More » -
Malicious npm Code Infiltrated 10% of Cloud Environments
A supply chain attack using malicious npm packages has…
Read More » -
Fake npm 2FA Reset Email Used to Hijack Popular Code Packages
A phishing campaign compromised at least 18 widely used…
Read More »
