Security Affairs
Advertisement

Ad Placeholder

Full Width × 90

All Posts

24 posts found

Attackers hijack Axios npm account to spread RAT malware
Attackers hijack Axios npm account to spread RAT malware
Threat actors hijacked the npm account of Axios to distribute RAT malware...

Breaking News

March 31, 2026

ENISA Technical Advisory on Secure Package Managers: Essential DevSecOps Guidance
ENISA Technical Advisory on Secure Package Managers: Essential DevSecOps Guidance
ENISA’s first Technical Advisory on Secure Package Managers helps developers safely use...

Breaking News

March 12, 2026

Malicious npm and PyPI packages linked to Lazarus APT fake recruiter campaign
Malicious npm and PyPI packages linked to Lazarus APT fake recruiter campaign
Researchers found malicious npm and PyPI packages tied to a fake recruitment...

APT

February 15, 2026

PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun
PackageGate bugs let attackers bypass protections in NPM, PNPM, VLT, and Bun
Koi researchers found “PackageGate” flaws in NPM, PNPM, VLT, and Bun that...

Hacking

January 28, 2026

Contagious Interview campaign expands with 197 npm Ppackages spreading new OtterCookie malware
Contagious Interview campaign expands with 197 npm Ppackages spreading new OtterCookie malware
North Korea-linked actors behind Contagious Interview uploaded 197 new malicious npm packages...

APT

November 30, 2025

New supply chain attack hits npm registry, compromising 40+ packages
New supply chain attack hits npm registry, compromising 40+ packages
Researchers uncovered a new supply chain attack targeting the npm registry that...

Breaking News

September 16, 2025

Advertisement

Ad Placeholder

970 × 250

Supply chain attack targets npm, +2 Billion weekly npm downloads exposed
Supply chain attack targets npm, +2 Billion weekly npm downloads exposed
Multiple popular npm packages were compromised in a supply chain attack after...

Breaking News

September 9, 2025

North Korea-linked actors spread XORIndex malware via 67 malicious npm packages
North Korea-linked actors spread XORIndex malware via 67 malicious npm packages
North Korea-linked hackers uploaded 67 malicious npm packages with XORIndex malware, hitting...

APT

July 15, 2025

The popular xrpl.js Ripple cryptocurrency library was compromised in a supply chain attack
The popular xrpl.js Ripple cryptocurrency library was compromised in a supply chain attack
The xrpl.js Ripple cryptocurrency library was compromised in a supply chain attack...

Breaking News

April 23, 2025

Advertisement

Ad Placeholder

728 × 90